CURES  FOR  COMPLEXITY  How  Big  Construction  VIRUSES,  PATCHES  and  SPAM,  OH  MY!  A  Single 

Uses  IT  to  Manage  Huge  Projects  Page84  Strategy  to  Address  a  Host  of  Annoyances  Page60 


Why  the 
Decline  of 
the  Influence 
Industry  Is 
Good  News 
for  You 

CIO  Greg  Smith  cut  his  research 
spending  by  40%  and  is  getting 
better  information  than  ever. 

How  you  can  too.  Page  50 


BY  SCOTT  BERINATO 


Introducing  the  new  Microsoft  Office  System. 

Now  users  can  do  more  for  themselves  so  you  can  focus 
on  the  important  things.  More  than  just  the  core  suite 
you're  familiar  with,  the  new  Microsoft®  Office  System  is 
an  integrated  system  of  easy-to-use,  expanded  programs, 
servers,  services,  and  solutions  that  help  end  users  be 
more  self-sufficient.  With  Microsoft  Office  InfoPath™  2003, 
customer  defined  XML  and  web  services,  and  Microsoft 
Office  SharePoint™  Portal  Server  2003,  users' documents 
and  forms  can  be  automatically  updated  with  the  latest 
information.  So  now  everyone  knows  they  have  the  most 
current  version,  minimizing  rework  and  data  reentry. 

And  less  busywork  for  them  means  even  less  busywork 
for  you.  To  find  out  how  the  Microsoft  Office  System 
can  work  for  you,  go  to  microsoft.com/officelT 


Microsoft 
Office  System 

More  than  what  it  used  to  be,  it's  now  a 
comprehensive,  customizable  system. 

Programs 

Servers 

Services 

Access  2003 

Excel  2003 
Frontpage®  2003 
InfoPath™  2003 

OneNote™  2003 
Outlook®  2003 

PowerPoint®  2003 
Project  2003 
Publisher  2003 

Visio®  2003 

Word  2003 

Project  Server  2003 

Live  Communications 
Server  2003 

Exchange 

Server  2003 

SharePoint™  Portal 
Server  2003 

Live  Meeting 

Office  Online 

Solutions 

Solution  Accelerators 

Enabling  Technologies: 

Windows  Server™  2003,  Windows®  SharePoint  Services, 
Rights  Management  Services 
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THIS  IS  AN 
AD  TO  ANNOUNCE 
POWERFUL  YET 
SIMPLER  BACKUP, 
RECOVERY  AND 
E-MAIL  ARCHIVING 
SOLUTIONS. 


Computer  Associates® 
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CONNECTED 
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VERITAS 


SO,  WHOSE  AD  IS  IT? 


We’re  the  one  with  nearly  ten  years  of  experience 
protecting  and  restoring  data  on  millions  of  PCs. 

Another?  Our  exclusive  data  reduction  technology  is 
US  patent  #5,765,173.  More  than  mere  compression,  it 
can  reduce  storage  requirements  hy  over  50%,  and  makes 
our  solutions  way  more  scalable. 

OK,  enough  hints.  1  ime  for  the  answer: 

Connected. 

Surprised? 

1  hen  just  wait  until  you  see  what  this  new  technology 
can  do  f  or  automatic  data  capture,  archiving  and  recovery. 


And  how  simply  (and  economica  Hy)  it  can  do  it. 

With  the  only  tamper-proof  e-mail  archiving.  I  he 
easiest  to  manage  Windows  server  and  PC  data  protection. 
And  intelligent  default  settings  that  automate  the  most 
complex  of  activities.  All  of  which  make  backup,  recovery 
and  archiving  of  distributed  data  suddenly  a  painless  process. 

In  these  days  of  powerful,  highly  complicated  I  f  solutions, 
it’s  good  to  know  there’s  a  company  now  offering  powerful, 
highly  uncomplicated  ones. 

And,  it’s  good  to  now  know 
exactly  who  that  is. 


Connected  Corporation — www.connected.com/recovery — 1-800-675-5972  (toll-free  North  America)  ©Connected  Corporation.  All  rights  reserved.  Connected  is  a  registered  trademark  of  Connected  Corporation. 
COMPUTER  ASSOCIATES  and  the  CA  logo  are  registered  trademarks  of  Computer  Associates  International,  Inc.  (CA).  LEGATO  and  the  LEGATO  logo  are  registered  trademarks  of  LEGATO  Systems.  Inc. 
VERITAS  and  the  VERITAS  logo  are  registered  trademarks  of  VERITAS  Software  Corporation.  Windows  is  a  registered  trademark  of  Microsoft  Corporation. 
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Cover  Story 

I.T.  ADVISORY  SERVICES  I  50 

Bad  News  for 
Analysts,  Good 
News  for  CIOs 

Today,  when  it  comes  to  research  and  analysis, 
CIOs  are  taking  advantage  of  what  looks  to  be  a 
permanent  buyer’s  market.  It’s  not  that  research  is 
suddenly  worthless.  It’s  just  suddenly  worth  less. 
By  Scott  Berinato 

COVER  PHOTO  BY  STEVEN  VOTE 


“My  recommendation  to  CIOs  is  clear,”  says  World  Wildlife  Fund  CIO 
Greg  Smith.  “Buy  research  on  a  trial  basis.  Do  comparisons  with 
boutiques.  Let  the  vendors  know  they’re  not  the  only  game  in  town.” 


Features 

I.T.  SECURITY  MANAGEMENT 

Why  You  Should  Sweat  the  Small  Stuff  I  60 

Viruses.  Spam.  Software  patches.  Upgrades.  Nuisances  that 
nibble  at  IT  shops  everywhere.  Attacking  them  as  a  class  of 
problems  elevates  your  security  readiness.  By  Kim  Girard 


Mary  Finlay,  deputy  CIO  of 
Partners  Healthcare  System, 
ditched  the  old  way  of  han¬ 
dling  nuisances.  Instead  of 
fixing  each  problem  as  it 
comes  along,  she  imple¬ 
mented  a  holistic  strategy. 


Q& A  I  AMIR  HARTMAN 
Ruthless  Strategies  I  70 

It’s  been  a  rough  few  years,  but  some  companies  have  managed  to 
thrive.  Why?  Because  their  leaders  know  how  to  steer  their  enter¬ 
prises  out  of  adversity.  Best-selling  author  and  turnaround  artist 
Amir  Hartman  tells  you  how  you  can  come  out  on  top. 

CASE  FILES  I  VALUE  SYSTEMS 
First  Things  First  i  78 

Using  a  prioritization  system  that  classifies  projects  by  the  value 
they  bring  to  the  business  ensures  that  Deseret  Book  steers  the 
right  amount  of  resources  to  the  right  projects.  By  Lafe  Low 

PROJECT  MANAGEMENT 
Cures  for  Complexity  I  84 

Long  a  technology  laggard,  the  $3  trillion  worldwide  construction 
industry  is  beginning  to  use  IT  to  manage  increasingly  complicated 
projects — and  learning  useful  lessons  about  the  character  and 
challenges  of  complexity  itself.  By  Fred  Hapgood 
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The  right  management  can  put  you  in  control  of  your  infrastructure, 
not  the  other  way  around. 

Unicenter*  Infrastructure  Management  Software 

So  long,  mayhem.  Management  is  here.  Unicenter  infrastructure  management  software  gives  you  unparalleled 
control  of  your  IT  environment.  It  lets  your  infrastructure  react  to  changes  in  real  time,  so  your  IT  and  business 
priorities  are  always  in  sync.  Its  self-healing  capabilities  help  you  do  more  with  less  and  control  costs.  To  learn 
how  the  right  management  can  help  you  realize  on-demand  computing  with  your  existing  infrastructure,  or  to  get 
a  white  paper,  go  to  ca.com/infrastructure. 


Columns 

THE  EXCHANGE 

Six  Smart  Strategies  for 

Handling  the  Help  Desk  I  36 

Members  of  the  Best  Practice  Exchange 
offer  ways  to  make  the  most  of  your 
understaffed  help  desk.  By  Martha  Heller 

TOTAL  LEADERSHIP 
The  Joy  of  Leadership  I  40 

Don’t  let  the  work  kill  the  wonder. 

By  Patricia  Wallington 


ESSENTIAL 
TECHNOLOGY  I  101 

IT  Phone  Home 


For  six  years,  voice  over  Internet  protocol 
has  been  poised  for  breakout.  But  if  VoIP  is 
the  future,  as  some  claim,  then  answer  this: 
Are  you  ready?  By  Matt  Villano 


MAKING  I.T.  WORK 
Now  You  See  It, 

Now  You  Don’t  I  46 

In  a  world  in  which  partners  are  privy  to 
each  other’s  data,  the  challenge  will  be  how 
to  collaborate  without  sacrificing  competi¬ 
tive  advantage.  By  Michael  Schrage 

REALITY  BYTES 
Inferiority  Complex  I  96 

Even  though  the  importance  of  IT  is 
continually  reaffirmed,  CIOs  insist  on 
questioning  their  role.  By  Megan  Santosus 

Sections 

TRENDLINES  I  22 

“Mr.  IT  Worker”  runs  for  office;  Suit 
seeks  tougher  medical  privacy  rules; 
Gadgets  to  bring  out  a  CIO’s  inner 
secret  agent.  And  more 


BY  THE  NUMBERS  I  26 

Recovering  data  is  the  easy  part. 

WASHINGTON  WATCH  I  30 

Conflicting  proposals  open  door, 
shut  gate  on  foreign  labor. 

ESSENTIAL  TECHNOLOGY  I  101 

As  the  world  awakens  to  voice  over 
IP,  some  CIOs  already  are  reaping  the 
benefits.  By  Matt  Villano 
UNDER  DEVELOPMENT  I  106 
New  research  could  lead  to  security  tools 
capable  of  stopping  attacks  that  hackers 
haven’t  even  invented  yet. 

PUNDIT  !  108 

Commercial  apps  and  the  hyperintegrated 
enterprise  may  lead  us  into  a  licensing 
tangle.  By  Eric  Knorr 


“Determining  how  much  information  you  reveal  to 
or  conceal  from  your  supply  chain  partners  may 
end  up  being  the  CIO’s  most  difficult  task.” 

-Michael  Schrage,  CIO  columnist,  on  collaboration  Page  46 
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There’s  disconnect  between  how  high  you 
rank  external  customers  on  your  priority 
list  and  how  much  time  you  actually  spend 
with  them.  By  Richard  Pastore 
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WHO  TO  CONTACT  I  16 

CIO  editorial  contacts  sorted  by  industry, 
and  business  and  technology  areas. 
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When  we  don’t  know,  this  is  who  we  ask. 
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EXECUTIVE  SUMMARY  I  112 

Abstracts  of  all  the  feature  stories  found 
in  this  issue. 
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MANAGE  YOUR  MISSION-CRITICAL  APPLICATIONS 


WE'LL 

SO  YOU  CAN  FOCUS  ON  MANAGING  YOUR  BUSINESS, 

Our  proactive  approach  to  managed  services  includes  capacity  planning, 
performance  analysis  and  application  deployment  services,  providing  you 
with  the  tools  you  need  to  understand  how  your  application  is  performing, 
leverage  new  technologies  and  plan  for  the  future.  Total  production  support 
for  your  application  code  frees  your  teams  to  concentrate  on  strategic 
initiatives.  Maximize  the  return  on  your  IT  investment  with  Highly 


DATA  RETURN 

highly  managed  hosting 


latareturn.com 


2004  Ditto  Return,  LLC.  All  Rights  Reserved. 


INTERACTIVE 

>features 

Interactive  features  from  March  15  to  March  31 


ASK  THE  SOURCE 

How  Can  I  Be  Ruthless 
with  a  Warm  and 
Pleasant  Smile? 

If  such  a  thing  is  possible,  Amir 
Hartman,  author  of  Ruthless 
Execution:  What  Business  Lead¬ 
ers  Do  When  Their  Companies  Hit 
the  Wall,  can  tell  you.  He  lays  out 
the  basics  of  being  a  benevolent 
dictator  (focus  and  accountabil¬ 
ity)  in  a  Q&A  with  CIO  (see  Ruth¬ 
less  Strategies,  Page  70).  If  you 
want  to  know  more  about  his  fact- 
based  approach  to  leading  and 
decision  making,  you  can  ASK 
THE  SOURCE.  Submit  questions 
to  Hartman  online  through  March 
31.  Goto  www.cio.com/experts. 


LEARN  MORE 

Project 
Prioritization 
Is  a  Bear 

Deseret  Book  found  a  way  to  bring 
order  to  a  random  IT  project 
prioritization  process  (see  First 
Things  First,  Page  78).  For  another 
recent  case  study  (with  analysis) 
on  project  valuation,  read  “Project 
Triage,"  which  describes  the 
process  used  by  the  Visiting  Nurse 
Services  of  New  York.  Find  it  at 
www.  cio.  com/printlinks . 


ADD  A  COMMENT 

Can  You  Avoid  Death 
by  a  Thousand  Cuts? 

In  Why  You  Should  Sweat  the  Small 
Stuff  (Page  60),  we  tell  you  just  that.  When 
talking  about  network  security  nuisances, 
small  stuff  becomes  big  stuff  if  you  don’t 
have  a  strategy  to  deal  with  it.  To  share  your 
own  approaches  to  convincing  manage¬ 
ment  that  spam  is  more  costly  in  the  long 
run  than  a  natural  disaster,  or  any  other  way 
you’ve  cured  the  chronic  minor  headaches 
of  IT  security,  go  to  the  online  version  of 
this  story  and  ADD  A  COMMENT. 


IN  THE  KNOW  Megan  Santosus  brings 
you  a  monthly  case  study  on  knowledge 
management  in  practice.  Weigh  in  on 
the  case. 

www.cio.com/knowledge 


CUSTOMER  CARE  Alison  Bass  writes 
about  CRM  topics  every  month.  What’s 
your  beef  with  CRM?  Write  her. 

www.cio.com/crm 


ALARMED  Scott  Berinato  and  Sarah  D. 
Scalet  take  turns  on  this  monthly  column 
on  security.  How  alarmed  are  you? 

www.cio.com/security 
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Online  Exclusives 


Talk  to  Us 


When  we  say,  “Tell  us  what  you  think," 
at  the  end  of  a  story,  we  mean  it. 
Besides  the  “Add  a  Comment”  box  at 
the  end  of  most  features  and  columns, 
here  are  some  places  we  want  to  hear 
from  you.  E-mail  us  or  post  a  comment. 


QUICK  POLL  A  weekly  issue  question 
that  seeks  your  answer.  Quick. 

www.cio.com/poll 


SOUND  OFF  Art  Jahnke’s  musings  on 
IT  issues  in  the  world  and  the  workplace 
often  rile  a  lot  of  opinion.  Add  yours. 

www.cio.com/soundoff 


PHOTO  LEFT  BY  JEFFERY  SALTER 


THANK  YOU  FOR  NAMING  US  NUMBER  ONE. 


End  users  have  spoken.  And  industry  analysts  agree.  Nearly  every  independent  industry  organization  awards  Konica 
Minolta  products  with  their  highest  ratings.  In-depth  user  surveys  honor  Konica  Minolta  products  for  their  reliability, 
quality  and  value.  The  toughest  testers  in  the  industry  pick  our  products  as  among  the  best.  Experience  Konica  Minolta’s 
award-winning  line  of  high-end  document  production  systems,  color  imaging  systems  and  multifunctional  document 
systems.  And  the  industry-leading  support  and  service  behind  the  products.  See  why  end  users  and  analysts  rate  us  so 
highly,  and  see  what  we  do  to  make  your  business  better.  Visit  www.konicaminolta.us 


©2004  Konica  Minolta  Business  Solutions  U.S.A.,  Inc. 


The  essentials  of  imaging 


Staples  found  guaranteed  cost  reductions 
in  stock  at  Fujitsu. 


Offering  guaranteed  low  prices  is  a  worthy  goal  for  any  retailer. 
But  Staples  was  determined  to  match  lower  prices  with  a  cor¬ 
responding  increase  in  customer  service.  So  they  did  a  little 
shopping  of  their  own,  and  found  a  partner  in  Fujitsu. 

Now  Fujitsu  manages  all  the  technology  in  every  Staples  store. 
So  checkouts  are  smoother.  Lines  are  shorter.  Innovative  self- 
service  systems  have  been  implemented.  And  since  employees 
spend  less  time  wrestling  with  stubborn  technology,  they  can 
spend  more  time  helping  customers. 


Best  of  all,  with  better  technology  came  lower  costs.  As  much 
as  60%  lower  annual  maintenance  cost  per  device.  Yet  this 
was  no  one-time  fire  sale.  The  service  agreement  with  Staples 
guarantees  cost  reductions  every  year,  year  after  year. 

Fujitsu  makes  it  easy  for  Staples  to  get  precisely  what  they 
want.  So  Staples  can  do  the  same  for  their  customers.  Visit 
us.fujitsu.com/together  for  details.  It’s  proof  positive  that, 
working  together,  we  can  accomplish  anything. 


©  2004  Fujitsu.  All  rights  reserved.  Staples  and  the  Staples  logo  are  registered  trademarks  of  Staples,  Inc. 
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FUJITSU 

THE  POSSIBILITIES  ARE  INFINITE 

us.fujitsu.com 


From  the  Editor 


Are  you  in  need  of  numbers? 
CIO  Research  Reports,  pro¬ 
duced  by  Research  Editor 
Lorraine  Cosgrove  Ware, 
can  be  found  online.  Go  to 
www2.cio.com/research 
to  find  out  what  your  fellow 
CIOs  consider  the  greatest 
concern  to  implementing 
wireless,  which  incentive 
is  increasingly  being  used 
to  motivate  workers,  and 
whether  ROI  or  TCO  wins 
out  as  the  preferred  measure 
of  IT  value. 
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The  Number-Two 
Priority 


CIO  MAGAZINE’S  annual  reader  feedback  survey 
is  a  26-question,  10-screen  online  behemoth,  but 
we  generally  get  close  to  1,000  responses  from 
folks  like  you  who  want  to  help  us  get  better  at 
serving  your  needs.  I’ve  just  spent  a  couple  of  days 
wallowing  in  the  numbers  and  have  pulled  out  a 
couple  of  interesting  findings. 

Your  answers  to  survey  questions  that  track  your 
priorities  corroborate  certain  trends.  For  example, 
the  cautious  optimism  that  the  economy  is  on  a  true 
rebound  is  affirmed  by  the  fact  that  “supporting 
new  business  activities”  and  “enabling  growth” 
have  climbed  several  notches  on  readers’  priority 
lists.  At  the  same  time,  the  imperative  of  “IT  cost 
reduction”  has  dropped  a  few  notches  in  impor¬ 
tance.  The  engines  of  growth  are  clearly  building 
steam,  and  IT  is  regrouping  to  power  those  engines. 

But  your  answers  also  reveal  some  disconnects. 
One  centers  around  IT’s  external  customers:  Their 
satisfaction  has  been  your  number-two  priority  for 
two  years  running,  second  only  to  security,  and  it 
is  two  notches  higher  than  internal  (user)  satisfac¬ 
tion.  But  how  much  time  do  IT  leaders  really  spend 
with  external  customers,  analyzing  their  actions 
and  needs,  and  discovering  opportunities  for  infor¬ 
mation  technology  to  better  their  customer  experi¬ 


ence?  Use  yourself  as  an  example.  How  many 
hours  did  you  spend  with  your  company’s  cus¬ 
tomers  during  the  past  six  months?  As  a  customer 
yourself,  do  you  recall  speaking  with  or  providing 
feedback  to  any  IS  person  from  a  company  you 
buy  products  or  services  from? 

I  suspect  not  many  of  you  answered  positively. 
In  a  different  CIO  study  of  100  IT  leaders  of  well- 
respected  and  award-winning  shops,  only  39  per¬ 
cent  said  they  conduct  satisfaction  surveys  of 
external  customers.  This  compared  with  89  per¬ 
cent  that  surveyed  internal  users.  And  only  one- 
third  linked  employee  pay  to  customer  satisfaction. 

If  external  customers  are  such  a  high  priority, 
you’d  think  IT  leaders  would  be  spending  more 
time  focused  on  this  population.  Granted,  it  isn’t  an 
easy  group  to  read.  Aside  from  customer  service 
systems,  most  external  customers  don’t  come  in 
direct  contact  with  technology.  But  they  have  needs 
that  must  be  understood.  And  they  have  shifting 
priorities  (just  like  CIO  readers).  So,  just  as  we 
reach  out  to  readers  as  part  of  our  effort  to  provide 
better  service,  IT  leadership  has  to  reach  out  to 
external  customers.  If  you  are  doing  that  effectively, 
I’d  like  to  hear  how  you  are  going  about  it.  Please 
drop  me  a  note. 


Richard  Pastore,  Editor 
pastore@cio.  com 
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For  the  client  who  designs  or  supplies  half  of  the  world’s  nuclear  power  plants, 
protecting  its  critical  network  resources  is  a  high  priority.  But  so  is  access. 
Thousands  of  users  rely  on  sensitive  data  and  applications  to  get  their  jobs  done. 
The  answer:  Secure  Identity  and  Access  Management  with  RSA  SecurlD®  authentication  and 
RSA  ClearTrust®  web  access  management.  Proven  solutions  that 
are  helping  this  leading  energy  provider  keep  its  secrets  safe,  its 
users  productive,  and  its  administrative  costs  low.  Solutions  that  could  make  safely  sharing  your 
Q2  sales  goals  a  lot  easier  than  hitting  them.  To  learn  more,  download  our  Identity  &  Access 
Management  and  Federated  Identity  Management  white  papers  at  www.rsasecurity.com/  p/iaml . 


ClearTrust 


SECURITY* 


©2004  RSA  Security  Inc  All  nghts  reserved.  RSA.  RSA  Secured,  the  RSA  Security  logo.  SecuriD  and  ClearTrust  are  registered  trademarks  or  trademai  . 
of  RSA  Security  Inc.,  in  the  United  States  and/or  other  countnes.  All  other  products  and  services  mentioned  are  trademarks  of  their  respective  companies. 
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AT&T  Wireless 


Sprint 


Get  information  in  25%  more  places  on  the  Sprint  high-speed  wireless  data  network. 


Your  employees  can  get  email  and  corporate  data  in  more 
places  nationwide  with  Sprint  than  with  AT&T  Wireless. 

The  Sprint  high-speed  wireless  data  network  covers  a  larger  area 
and  more  people  than  the  AT&T  Wireless  GPRS/EDGE  network. 
So  your  employees  can  be  more  productive  in  more  places. 

•  25%  larger  coverage  area 

•  25  million  more  people  covered 

All  this  and,  of  course,  clear  calls  on 
the  nation's  most  complete,  all-digital 
wireless  network  to  make  your 
business  more  effective. 

Get  the  facts  at  sprint.com/facts  or  call 
877-459-8144  for  a  Business  Representative. 


One  Sprint.  Many  Solutions.SM 

Voice/Data  PCS  Wireless  Internet  Services  E-Business  Solutions  Managed  Services 


The  Sprint  Nationwide  PCS  Network  reaches  over  245  million  people.  Coverage  not  available  everywhere.  Coverage  claims  based  on  the  Sprint  Nationwide  PCS  Network  and  the  AT&T  Wireless  GPP'-  DGE 
National  Network  excluding  roaming  areas.  Screen  shot  simulated.  Copyright  ©Sprint  2004.  All  rights  reserved.  Sprint  and  the  diamond  logo  are  trademarks  of  Sprint  Communications  Company  L.P 
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Introducing  nothing. 


No  spam.  No  email  fraud.  Just  the  messages  you  want. 


@  MailFrontier 

Email  is  good  again? 


IBM,  the  e-business  logo,  e-business  on  demand,  eServer  and  the  eServer  logo  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  Statistics  courtesy  of  IBM. 
Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of  others.  ©2004  IBM  Corp.  All  rights  reserved. 


/A  guide  to  the  on  demand  world:  Optimization 

You  wouldn’t  keep  an  employee  who 
only  works  10%  of  the  time. 

Now,  a  word  about  your  servers. 

It's  an  on  demand  world.  You  know  that.  It’s  why  your  servers  are  up  24x7 
Answering  queries.  Managing  information.  Heading  problems  off  at  the  pass. 
Apparently,  working  as  hard  as  they  can.  But  appearances  can  be  deceptive. 
“On”  doesn’t  always  mean  “active!'  And  “active”  doesn’t  always  mean  “available!’ 
The  answer  is  not  new  servers  -  it’s  optimization.  And  here,  IBM  can  help. 


A  recent  survey  showed  that  most  companies  use,  on  average,  only  10%  of  their  server  capacity.  Think  about 
that.  90%  of  your  IT  investment  may  be  lying  idle  right  now.  Invisible  to  the  development  teams  who  need  more 
processing  power.  Inaccessible  to  customer  service,  which  needs  increased  system  redundancy,  “just  in  case’.’ 
Wasted  resources.  And  something  IBM  can  help  you  avoid. 

IBM  Infrastructure  Management  Solutions  are  a  combination  of  hardware,  software  and  services,  designed 
to  optimize  and  streamline  the  infrastructure  you  already  have.  Based  on  your  business  priorities,  they 
intelligently  reallocate  resources,  proactively  sense  and  respond  to  demands  for  computing  power  and 
reduce  the  need  to  invest  in  systems  that  handle  a  once-a-year  spike  in  traffic  (an  infrastructure  cost  savings 
of  up  to  35%).  It’s  only  fair.  You’re  working  110%  to  meet  the  demands  of  the  on  demand  world.  We  think  your 
systems  should,  too. 


Charles  Schwab  sees  it:  Their  secret  weapon?  An  IBM  grid  infrastructure 
solution.  It  maximizes  processor  efficiency  on  their  IBM  (©server  systems,  cutting 
processing  time  on  a  financial  application  from  minutes  to  seconds.  Hello  enhanced 
service.  Hello  happy  customers. 


86,400  seconds  a  day. 
Use  every  one. 


. 


n 


Can  you  see  it  It’s  an  on  demand  world.  IBM  and  its  partners  can  help 
you  make  the  most  of  it.  Put  our  thousands  of  industry  specialists,  proven 
solutions  and  years  of  experience  to  work  for  you,  one  ROI  at  a  time.  On  demand 


ibm.com/ondemand 


business.  Get  there  with  <0 business  on  demand™ 


Board  of  Advisers  2004 


CIO  wishes  to  acknowledge  the  2004  Editorial  Advisory  Board  members  for  their  ongoing 
guidance  and  reality  check  of  the  magazine’s  content  and  focus.  We  thank  them  for  their 
generosity  in  sharing  their  insight  into  the  world  of  IT  leadership. 
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Spirit  of  Service 


VOICE  SOLUTIONS  DATA  SOLUTIONS  INTERNET  SOLUTIONS  MANAGED  SOLUTIONS 


Qwest  iQ  Networking  is  a  suite  of  WAN  services  with  domestic  and  international  availability  depending  on  services  selected.  Recurring  fees  vary  depending  on  services  ordered. 
Additional  equipment  may  be  required,  Qwest  and  Qwest  iQ  Networking  are  trademarks  of  Qwest  Communications  International  Inc.  ©2004  Qwest.  All  rights  reserved. 


A  network  is  a  network  is  a  network.  That  is,  until  you  want  to  add  a  new  application  like  Voice  Over  IP. 
Or  integrate  x.25  legacy  nodes  into  a  network  built  for  frame  relay  or  ATM.  Or  get  something  done  through  an 
accountable  single  point  of  contact.  The  fact  is,  you  can  never  be  sure  what  you’re  going  to  do  next  with  your 
network,  or  what  device  you’ll  be  hanging  off  of  it.  And  you  don’t  want  to  be  with  a  vendor  who’s  going  to  tell 
you  to  throw  out  your  infrastructure  and  start  over.  Which  is  why  you  want  to  be  with  Qwest.® 


Cali  1  800-506-0663  or  visit  qwest.com/networkso1utions 


INTRODUCING  QWEST  IQ  NETWORKING.™ 

PLUG  YOUR  COMPANY  IN.  WE’LL  MAKE  IT  PLAY. 


SOLUTIONS 


SHELF. 


Qwest 


wi  vs ir*» 
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2004  ELECTION 

“Mr.  IT  Worker” 

Runs  for  Washington 

Citing  U.S.  job  losses,  at  least  five  IT  workers  launch 
campaigns  for  House  seats 


WHEN  WE  VISITED  with  him  last  sum¬ 
mer,  Mike  Emmons,  a  former  pro¬ 
grammer  at  Siemens  ICN  in  Florida, 
was  so  angry  to  see  his  job  filled  by  a 
nonimmigrant  worker  on  an  L-l  visa, 
that  he  talked  of  getting  even  by  run¬ 
ning  for  Congress  this  year.  (See  “The 
Radicalization  of  Mike  Emmons”  at 
www.cio.com/prmtlinks).  Now  he’s  col¬ 
lecting  signatures  to  appear  on  the 
Democratic  primary  ballot. 

Emmons  concedes  he’s  a  long  shot 
to  win.  But  on  the  way  to  the  ballot, 
Emmons  made  an  interesting  discovery: 
At  least  four  others  with  IT  back¬ 
grounds,  from  Florida,  Pennsylvania 


and  Texas,  have  declared  their  candida¬ 
cies.  Among  their  primary  motivations: 
a  desire  to  change  the  country’s  policies 
on  IT  outsourcing  and  immigration. 

IT  workers  are  the  latest  in  a  line 
that  has  included  autoworkers  in  the 
1980s  and  mothers  whose  children 
were  killed  by  drunk  drivers,  who  turn 
to  politics  for  personal  reasons,  says 
David  King,  an  expert  on  Congress 
from  Harvard  University’s  Kennedy 
School  of  Government. 

“Most  people  aren’t  born  political, 
they  become  political,”  says  King,  who 
has  interviewed  every  new  member  of 
Congress  since  1992.  “Most  have  a 
compelling  story  around  a  life-changing 
event.”  King  says  he  thinks  that  out¬ 
sourcing  is  too  narrow  an  issue  on 
which  to  base  a  candidate’s  winning 
campaign;  it  doesn’t  resonate  with  large 
chunks  of  the  population.  But  the  num¬ 
ber  of  candidates  willing  to  make  out¬ 
sourcing  an  issue  will  grab  Washington’s 
attention  and  force  lawmakers  to  do 
something,  he  says.  The  candidates, 
whose  stories  follow,  are  all  political 
newcomers.  Continued  on  Page  24 


Mike  Emmons  isn’t  the  only  IT  professional 
running  for  Congress  this  year  to  argue  for 
changes  in  U.S.  labor  and  outsourcing 
policies. 


SPORTS 

Rulings  on  the  Field 

PHOTO  FINISHES  have  defined  close  horse  races 
since  before  Seabiscuit.  Video  replays  are  a  momen¬ 
tum-shifting  part  of  National  Football  League  games. 

But  the  sandlots  of  time  move  slowly  when  it  comes 
to  using  technology  to  check  baseball  umpires’ 
judgments  about  balls  and  strikes.  The  pastime 
known  for  its  afficionados’  love  of  metrics— on-base 
percentage,  walks-to-strikeouts  ratios,  you  name  it— 
has  been  slow  to  adopt  tech  tools.  A  Bronx  cheer 
greeted  Major  League  Baseball’s  use  of  the  Umpire 
Information  System  from  QuesTec  in  2003. 

QuesTec's  system  collects  video  from  cameras  at 
the  ballpark  to  analyze  pitches  relative  to  the  strike 
zone  (over  home  plate,  and  reaching  from  the  hollow 
beneath  a  batter’s  kneecap  up  to  the  midpoint 
between  his  belt  and  shoulders).  Baseball  used 
QuesTec  as  a  quality  control  check  on  umpire’s 
judgments  at  13  of  30  ballparks  last  season.  Objec¬ 
tions  came  from  the  World  Umpires  Association  and 
star  pitchers  alike  (including  Curt  Schilling,  who 
smashed  a  QuesTec  video  machine  during  a  loss  in 
Arizona).  League  officials  say  the  system  shows 
umpires  are  making  accurate  calls  and  baseball  will 
continue  to  use  it.  The  Yankees  face  the  Devil  Rays  in 
the  season  opener  March  30.  Play  ball. 
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Introducing  Raritan's  Dominion™  Series. 

Because  a  more  efficient  Data  Center  means  a  more  efficient  company. 


Three  months  from  now,  you  could  be  standing  in  front  of  your  company,  saying  "Productivity  is  up  and  costs  are  down."  It's 
no  surprise.  With  Raritan's  newest  additions  to  the  Dominion  Series,  it's  easier  and  more  efficient  to  manage  technology  assets 
anywhere  in  the  world.  Dominion  KX  gives  you  the  industry's  most  dependable  and  most  secure  KVM  over  IP  technology; 
CommandCenter™  provides  consolidated  enterprise  command  and  control.  You'll  have  128-bit  security,  scalability,  in  and 
out-of-band  access,  full  cross-platform  compatibility,  and  more.  Deployed  separately  or  together,  the  Dominion  Series  protects 
your  bottom  line  as  well  as  your  bottom. 


Ask  your  Data  Center  Manager  to  schedule  a  test  drive  by  calling  1-800-724-8090  x938 

or  by  visiting  us  at  www.raritan.com/938 
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Command 

Center 


CommandCenter, 
for  consolidated  enterprise 
control,  is  one  part  of 
RARITAN'S  DOMINION  SERIES 
The  Complete  Data  Center 
Management  Solution 


Dominion 


Dominion 


Dominion 


When  you’re  ready  to  take  control. 
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FOLLOW-UP 

IT  Muscle  for  “Governator” 

California’s  CIO  pursues  system-driven 
savings  for  Schwarzenegger 

J.  CLARK  KELSO  may  be  unemployed  six  months  from  now,  but  there’s  no 
time  to  focus  on  that.  His  state  is  out  of  money,  his  new  boss  is  talking  about 
blowing  up  the  structures  of  government,  and  Kelso,  the  CIO  of  California,  is 
trying  to  find  ways  to  do  more  with  less. 

Kelso’s  job  has  never  been  easy.  (See  “Crazy  as  Usual  for  California  CIO"  at 
www.cio.com/printlinks.)  He  was  appointed  in  the  wake  of  a  $95  million  Oracle 
contract  scandal  and  recently  saw  the  Democrat  who  appointed  him,  former 
Gov.  Gray  Davis,  recalled.  Kelso’s  new  boss,  Gov.  Arnold  Schwarzenegger,  in 
February  created  the  California  Performance  Review  to  find  ways  to  cut, 
consolidate  and  modernize  the  state’s  bureaucracy.  Kelso  sees  IT  playing  a 
major  role  in  the  initiative.  "The  governor  is  looking  for  radical  ideas,"  he  says. 

"You  don't  do  any  of  those  things  without  having 
information  technology  playing  a  significant  role  as 
the  facilitator  of  those  changes." 

The  state  failed  to  cash  in  on  the  productivity  gains 
that  IT  brought  to  the  private  sector  in  the  1990s, 
Kelso  says,  and  if  California  could  consolidate  more 
of  its  aging  data  systems  and  effectively  deploy  more 
Internet  technologies,  it  could  alleviate  some  of  the 
financial  pain  that  the  state’s  looming  $14  billion 
deficit  promises  to  inflict. 

But  even  with  the  deficit,  IT  spending  in  California 
has  not  ground  to  a  standstill.  Kelso  still  expects  a 
planned  consolidation  of  two  of  the  state’s  data 
centers  to  move  forward  this  summer,  and  he  is  now 
shepherding  the  state  controller’s  office  through  an 
upgrade  of  its  payroll  systems,  which  he  expects  to 
go  out  for  bid  early  this  year. 

But  will  Kelso  still  have  a  job  in  the  Republican 
governor’s  administration?  Schwarzenegger’s 
rhetoric  indicates  that  Kelso  still  has  a  shot.  During 
his  campaign,  the  Hollywood  actor  and  self- 
proclaimed  political  outsider  said  he  would  work 
to  cross  party  lines.  “There’s  a  lot  of  great  talent  in 
Sacramento,  Democrats  and  Republicans  al ike — 
people  that  really  want  to  do  good  for  the  state,” 
Schwarzenegger  told  the  Sacramento  Bee  before  the 
October  2003  special  election.  “You  have  to  bring 
them  together  and  give  them  leadership.” 

It  would  not  be  a  shock  to  see  Kelso  stay  on,  says  Barbara  O’Connor,  director  of 
the  Institute  for  the  Study  of  Politics  and  Media  with  California  State  University  at 
Sacramento.  Kelso’s  role  in  cleaning  up  the  state’s  IT  practices  have  earned  him 
high  marks,  she  says.  “He’s  not  highly  partisan.  He  came  in  at  a  time  when  there 
was  a  big  crisis.. .and  kind  of  cleaned  house." 

Kelso  says  that  he's  in  the  same  position  as  many  other  department  directors 
in  California’s  government  these  days,  but  he  admits  that,  as  far  as  CIO  jobs  go, 
his  is  unique.  "It’s  not  a  job  for  somebody  who  wants  a  lot  of  job  security  because 
you  never  know  whether  it’s  going  to  be  there  in  six  months.”  -Robert  McMillan 


“Mr.  IT  Worker” 

Continued  from  Page  22 

Mike  Emmons,  Democrat,  Florida,  7th  District 
Emmons,  an  Independent,  switched  to  Democrat 
for  the  Aug.  31  primary.  Emmons  has  met  with 
party  officials  and  has  lined  up  speaking  engage¬ 
ments  across  the  central  Florida  district,  which 
stretches  from  St.  Augustine  to  Daytona  Beach. 
State  party  officials  have  told  him  that  his  candi¬ 
dacy  is  a  long  shot,  but  Emmons  says,  “I  know 
we  can  win  if  we  tell  the  people  what  is  going  on.” 

If  Emmons  gets  through  the  primary,  he’d  face 
a  six-term  incumbent,  Republican  John  L.  Mica, 
who’s  official  website  includes  an  update  on  his 
efforts  to  close  a  loophole  in  L- 1  worker  visas. 

Floyd  Jay  Winters,  Democrat,  Florida,  13th  District 
Winters,  a  computer  science  professor  and  pro¬ 
gram  manager  at  Manatee  Community  College, 
puts  jobs  and  the  economy  at  the  center  of  his 
campaign,  while  also  stressing  his  support  for  edu¬ 
cation  and  health-care  benefits.  Winters  seeks  the 
seat  representing  the  Sarasota  area  now  held  by 
Republican  Katherine  Harris,  who  is  reportedly 
considering  a  run  for  Senate.  Harris  is  the  former 
Florida  secretary  of  state  who  presided  over 
George  W.  Bush’s  victory  in  the  state’s  presiden¬ 
tial  recount  in  2000. 

Brian  Rubarts,  Republican,  Texas,  3rd  District 
Rubarts  is  an  IT  consultant  who  was  seeking  to 
oust  13-year  incumbent  Republican  Sam  Johnson, 
a  senior  member  of  the  powerful  House  Ways  and 
Means  Committee,  for  the  district  that  serves  an 
area  north  of  Dallas.  The  two  were  slated  to  face 
off  in  a  GOP  primary  scheduled  for  March  9. 
“Our  national  security  is  being  put  at  risk  because 
of  the  outsourcing  of  software  development  to 
nations  that  are  not  the  right  trading  partners  for 
the  U.S.,”  Rubarts  says  on  his  website. 

Another  IT  consultant,  Paul  Jenkins,  has  made 
protecting  American  jobs  and  overhauling  immi¬ 
gration  policies  his  central  themes.  Jenkins  is  run¬ 
ning  as  an  Independent  in  this  conservative  GOP 
district  where  no  Democrats  are  on  the  ballot,  the 
Dallas  Morning  News  reports. 

Bob  Dodge,  Republican,  Pennsylvania,  15th  District 
Dodge,  a  veteran  AS/400  administrator,  seeks  an 
open  House  seat  in  Eastern  Pennsylvania  so  he  can 
change  federal  policies  on  worker  visas  and  off¬ 
shore  outsourcing.  “The  new  education  initiative 
in  the  United  States  is  called  ‘No  child  left  behind,”’ 
he  says  on  his  website.  “We  need  a  new  initiative 
called  ‘No  American  left  behind.’”  -Ben  Worthen 
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i  want  to 


stop 


focusing  on  what’s  attacking  my  servers, 


and  Start  focusing  on  attacking  new  markets. 


» 


By  combining  System  Protection  and  Network  Protection  Solutions,  the  McAfee'-'0  Security  Protection-in-Depth "  strategy  secures 
your  business  from  the  desktop,  to  the  network,  to  the  server — the  mission-critical  heart  of  your  IT  infrastructure.  Add  our  Intrusion 
Prevention  technologies  and  you  can  start:  preventing  known  and  unknown  threats  rather  than  merely  detecting  them.  Which 
means  you  can  think  a  little  less  about  security,  and  more  about  securing  new  markets  Start  today  at  start.mcafeesecurity.com 

'•  .  1  V 

Because  security  is  not  just  about  what  you  can  stop. 


Network  Associates.  McAfee,  and  Protection-in-Depth  are  registered  trademarks  or  trademarks  of  Network  Associates.  Inc  and/or  its  affiliates  in  the  US  and/or  other  Countries 
All  other  registered  and  unregistered  trademarks  herein  are  the  sole  property  of  their  respective  owners  ©2004  Networks  Associates  Technology  Inc  All  Bights  Reserved 
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Recovering  Data  Is 
the  Easy  Rart 


A  RECENT  STUDY  of  companies  with  complex 
supply  chains  (like  consumer  products  mak¬ 
ers  and  retailers)  by  Ernst  &  Young  found  that 
when  it  comes  to  business  continuity,  compa¬ 
nies  pay  more  attention  to  their  data  than  their 
operations.  While  most  respondents  have 
established  testing  procedures  to  ensure  that 
their  data  (names,  addresses  and  SKUs)  is 
backed  up,  far  fewer  have  tested  the  continu¬ 
ity  of  their  supply  chain  operations  (inventory, 
warehousing  and  logistics). 

John  F.  Barile,  senior  manager  of  technology 
and  security  risk  services  at  Ernst  &  Young, 


says  backing  up  data  is  a  longstanding  no- 
brainer  in  IT.  But  Barile  says  executives  sel¬ 
dom  think  about  the  processes  and  failures 
that  fall  out  of  IT’s  scope.  They  see  incidents 
such  as  power  outages  as  unlikely,  and  there¬ 
fore  difficult  to  rationalize  and  plan  for.  Fur¬ 
thermore,  he  says,  it’s  easy  to  blame  IT  when 
the  systems  go  down.  The  supply  chain’s 
shared  ownership  (IT,  logistics  and  so  on) 
makes  determining  responsibility  tougher. 

“Business  continuity  needs  to  be  more  than 
recovery  of  the  systems,”  says  Barile.  “It’s  also 
the  recovery  of  the  business  process.” 


Best  Practices 

Provide  insight  to  operations 
management  during  business- 
impact  analysis.  Many  supply  chain 
users  will  have  a  detailed  under¬ 
standing  of  the  specific  systems  that 
they  use  to  maintain  connectivity 
throughout  the  supply  chain,  but  not 
of  all  upstream  and  downstream 
relationships  whose  loss  could  bring 
the  entire  enterprise  to  a  halt. 

Develop  IT  disaster  recovery  plans 

to  support  supply  chain  initiatives, 
such  as  redundancies  in  communi¬ 
cations  between  the  supply  chain 
organization  and  external  partners. 


Testing  Data  Recovery,  Not  Business  Recovery 

The  retail  industry  leads  the  pack  in  testing  both  data  and  business  recovery  procedures 

|  tested  data  recovery 

Bi  tested  business  process  recovery 


Food  &  beverage 


Consumer  Products’  Bizarre  Confidence 

Product  makers  think  they  can  recover  the  business,  but  few  have  actually  tested  that  belief 


“I  have  the  ability  to  bring  systems  back  online  after  an  outage.” 


92% 


"I  have  tested  that  ability.” 


17% 


SOURCE:  Ernst  &  Young 


Assist  in  the  categorization  of 
critical  supply  chain  partners  whose 
loss  might  not  be  apparent  to  supply 
chain  users  with  a  limited  IT  back¬ 
ground  (utilities,  IT  providers, 
outsourcers).  Offer  and  implement 
technical  solutions  to  mitigate  risk  of 
these  critical  enterprises,  such  as 
system  redundancy. 

Help  develop  a  testing  protocol  to 

ensure  that  all  supply  chain  partners 
have  developed  and  exercised  their 
own  continuity  plans,  as  the  loss  of 
any  critical  just-in-time  supplier 
could  negatively  affect  operations. 

Lend  qualified  project  managers  to 

the  supply  chain  business  continuity 
plan  project  management  office. 

Exercise  supply  chain  business 
continuity  plans  jointly  with  IT 
disaster  recovery  plans. 

Provide  capabilities  to  ensure  that 
supply  chain  continuity  plans  are 
kept  up  to  date  and  consistent  with 
procedures  used  to  keep  IT  disaster 
recovery  plans  updated. 
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2:01AM  CHECK  INTO  HOTEL  2:11AM 
CHECK  INTO  INTERNET2:26AM 
WORM  ENTERS  ROOM  536  2:28AM 
WORM  EVACUATED  BY  NETWORK 
2:32  AM  ORDER  GRILLED  CHEESE 
AND  FRIES  2:35AM  DOZE  OFF 

Your  mobile  workforce.  An  army  of  productivity  or  multiple  points  of  entry  ripe  for  intruders?  Enter  the  self-defending  network,  with  integrated 
security  woven  throughout.  A  line  of  defense  that  delivers  security  where  security  is  needed.  Wherever  you  do  business.  Inside  the  intranet. 
Outside  the  intranet.  Across  the  Internet.  Even  in  hotel  rooms  on  the  other  side  of  the  planet.  So  your  jet-lagged  mobile  workers  stay  safe  and 
secure.  And  your  business  keeps  marching  forward.  To  learn  more  about  how  Cisco  can  help  plan,  design  and  implement  your  network  security, 
visit  cisco.com/securitynow.  SELF-DEFENDING  NETWORKS  PROTECT  AGAINST  HUMAN  NATURE. 


THIS  IS  THE  POWER  OF  THE  NETWORK.  nOW. 


Cisco  Systems 


©2004  Cisco  Systems,  Inc.  All  rights  reserved.  Cisco,  Cisco  Systems,  Cisco  IOS,  and  the  Cisco  Systems  logo  are  registered  trademarks 

or  trademarks  of  Cisco  Systems,  Inc.  and/or  its  affiliates  in  the  U.S.  and  certain  ether  countries. 


HEALTH-CARE  I.T. 

Suit  Seeks  Tougher 
Medical  Privacy  Rules 

A  FEDERAL  COURT  JUDGE  in  Philadelphia  is  considering  arguments  in  a  law¬ 
suit  that  contends  that  the  new  HIPAA  privacy  regulations  are  a  “broad  and 
serious”  breach  of  Americans’  right  to  medical  privacy.  The  suit,  which  takes 
on  the  federal  Department  of  Health  and  Human  Services,  criticizes  the  new 
rules  for  not  requiring  health-care  providers  to  obtain  patients’  consent  before 
sharing  their  medical  information  with  third  parties  for  research,  marketing, 
billing,  law  enforcement  and  a  host  of  other  “routine  purposes.”  The  judge 
heard  arguments  in  December. 

“If  someone  has  received  psychotherapy  for  an  emotional  disorder  or  has  a 
homosexual  experience  and  says  to  their  doctor,  ‘I  really  don’t  want  this  infor¬ 
mation  disclosed  further,’  it  goes  out  anyway,’”  says  James  C.  Pyles,  the  attorney 
representing  the  1 8  plaintiffs,  who  include  patients  and  doctors  as  well  as  organ¬ 
izations  such  as  the  American  Associadon  of  Practicing  Psychiatrists.  The  purpose 
of  the  suit,  Pyles  says,  is  to  force  HHS  to  return  to  HIPAA  wording  proposed  by 
the  Clinton  administration,  which  required  health-care  entities  to  obtain  patients’ 
consent  before  sharing  their  medical  information  with  third  parties. 

In  court  filings,  HHS  attorneys  assert  that  the  new  rules  adequately  bal¬ 
ance  HIPAA’s  demands  for  improving  health-care  efficiency  via  electronic 
records  with  protecting  privacy.  They  say  the  consent  requirement  was  removed 

from  the  regulations,  which 
went  into  effect  last  April, 
because  it  “would  have  sub¬ 
stantially  delayed  and  inter¬ 
fered  with  the  delivery  of 
health-care  services  in  a  wide 
variety  of  circumstances.” 

The  federal  agency  has 
previously  noted  that  third 
parties  that  receive  patient 
information  must  sign  pri¬ 
vacy  agreements  with  the 
medical  provider  and  abide 
by  the  same  disclosure 
restrictions  that  providers 
must  observe. 

However,  as  more  health¬ 
care  providers  move  toward 
electronic  medical  records 
that  they  can  easily  share  via 
the  Internet,  the  potential  for 
abuse  grows,  Pyles  says. 
“Remember  that  hospital  in 
San  Francisco,”  he  says, 
referring  to  the  University  of 
California  at  San  Francisco  Medical  Center.  The  hospital  sent  patient  records, 
via  a  subcontractor,  to  a  medical  transcriber  in  Pakistan.  “That  was  a  covered 
entity  under  the  new  HIPAA  rules — and  look  what  happened,”  he  says.  “A 
clerk  for  the  Pakistani  business  threatened  to  post  that  information  online  if  she 
didn’t  get  [paid].”  -Alison  Bass 


lines 


VALUE 


Think. 
Implement. 
Then  Go  Back 
and  Measure. 


WHEN  IT  COMES  TO  producing 
lasting  value,  CIOs  need  to  be 
demanding— of  themselves,  their 
executive  counterparts  and  their 
organizations— and  committed  to 
asking  questions  that  address 
doubts  about  technology’s  worth 
and  an  organization’s  ability  to 
use  IT  well.  Then,  when  a  project 
or  process  starts,  it's  the  CIO  who 
must  demand  a  review  to  see  if 
the  work  actually  makes  a  positive 
difference,  says  John  Glaser,  vice 
president  and  CIO  at  Partners 
Healthcare  System  in  Boston. 

Glaser  told  IT  executives  at 
CIO's  Enterprise  Value  Retreat 
last  month  in  Sunny  Isles,  Fla.,  that  “value  has  to  be 
managed  into  existence,”  a  process  that  often  takes 
iterations  of  effort.  He  also  noted  four  mandates  that 
CIOs  must  address. 


John  Glaser 


Make  sure  there’s  a  business  sponsor  champion  who 
will  defend  an  IT-related  initiative  in  front  of  his  peers. 


Establish  clear  lines  of  accountability  in  an  organiza¬ 
tion’s  leadership  for  a  project’s  outcome. 


Set  numeric  business  goals  that  are  analyzed  thoroughly. 

Perform  an  audit  of  the  affected  business  process  or 
project  after  it’s  implemented. 


“It’s  really  hard  to  get  value,  and  it’s  not  all  that 
common,”  Glaser  said,  adding  that  there  are  three  ways 
CIOs  can  get  in  the  way  of  value:  failing  to  communicate 
in  terms  business  executives  can  understand,  accepting 
the  worth  of  new  technologies  without  enough  question¬ 
ing,  and  producing  projects  that  fail. 

Glaser,  whose  organization  is  made  up  of  several 
Boston-area  hospitals,  said  executives  and  CIOs  need  to 
seek  value  that  goes  beyond  straight  ROI.  "It’s  the  context, 
the  intent,  the  skill  of  people  using  it”  that  is  vital  to 
understand,  he  said.  At  Partners,  the  chief  medical  officer 
is  responsible  for  health-care  quality  and  champions 
initiatives  to  improving  care,  using  IT  as  a  tool.  “Make  sure 
those  who  are  responsible  are  the  ones  who  are  defending 
IT  investments,”  Glaser  said.  -Michael  Goldberg 
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MAKE  LINUX 
FASTER. 

MAKE  SOLARIS 
FASTER. 

MAKE  YOUR  BUSINESS 
FASTER. 

Introducing  AMD  Opteron 

Sun  Fire  V20z  servers  feature  screaming  AMD  Opteron 
Solaris  Operating  System  up  to  45%  faster  than  comparable 
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Add  the  Sun  Java™  Enterprise  System  -  Sun’s  entire  infrastrucfl  _ 
Sun  Storage  and  Services  to  experience  the  fuii  Sun  systems  advft 
extreme  performance  at  compelling  prices. 
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microsystems 

The  Network  is  the  Computer 


SOLARIS'  lava 


Opteron 


■PR  SUN  AND  AMD  OPTERON  AT 
SUN.C0M/V20Z 

OR  CALL  800.SUN.0404* 


95 


2  V20z 
STARTING 
l  LIST  PRICE 


1.  BASED  ON  TESTS  WITH  AMD  OPTERON  VS.  3.2  GHZ  XEON  RUNNING  LINUX.  AMD  OPTERON  RAN  45%  FASTER  ON  SPECWEB  99SSL  -  BASED  ON  PUBLISHED  DATA  FROM  WWW.SPEC.ORG  1/22/04.  FOR  SOLARIS,  OS 
MICROBENCHMARKS  PERFORMED  AN  AVERAGE  42%  FASTER  ON  AN  AMD  OPTERON  PROCESSOR  MODEL  246  (2.0  GHZ)  BASED  SYSTEM  COMPARED  TO  A  3.2  GHZ  XEON  SYSTEM.  2.  PRICING  IS  U  S.  LIST  PRICE.  ALL  PRICES 
QUOTED  ARE  IN  U.S.  DOLLARS.  *  TOLL-FREE  NUMBER  AVAILABLE  IN  THE  UNITED  STATES,  CANADA  AND  INTERNATIONAL  AMERICAS  ONLY.  2004  SUN  MICROSYSTEMS,  INC.  ALL  RIGHTS  RESERVED.  SUN,  SUN 
MICROSYSTEMS,  THE  SUN  LOGO,  SOLARIS,  THE  SOLARIS  LOGO,  JAVA,  THE  JAVA  LOGO,  AND  “THE  NETWORK  IS  THE  COMPUTER"  TAGLINE  ARE  TRADEMARKS  OR  REGISTERED  TRADEMARKS  FOR  SUN  MICROSYSTEMS, 
INC.  IN  THE  UNITED  STATES  AND  OTHER  COUNTRIES.  AMD,  THE  AMD  ARROW  LOGO,  AMD  OPTERON  AND  COMBINATIONS  THEREOF,  ARE  TRADEMARKS  FOR  ADVANCED  MICRO  DEVICES,  INC. 
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Edited  by  Elana  Varon 


Debate  Brews  Over  Jobs 

Conflicting  proposals  open  door,  shut  gate  on  foreign  labor 


LEGISLATION  TARGETING  offshore  out¬ 
sourcing  and  a  plan  by  President  Bush  to 
welcome  more  foreign  labor  are  fanning 
the  election-year  debate  over  jobs — and 
sending  a  mixed  message  to  CIOs  who  are 
trying  to  develop  outsourcing  plans. 

Last  month,  N.  Gregory  Mankiw,  chair¬ 
man  of  Bush’s  Council  of  Economic  Advis¬ 
ers,  endorsed  offshoring  white-collar  work 
as  having  a  long-term  benefit  on  the  econ¬ 
omy.  His  statement  followed  an  announce¬ 
ment  by  Bush  in  January  calling  for  a  new 
temporary  worker  program  that  would 
allow  companies  to  hire  foreign  labor  more 
easily  because  the  job  market  necessitates 
new  immigration  laws. 

The  Bush  immigration  plan  has  IT  work¬ 
ers  worried.  Because  there  are  already  two 
visa  programs  for  admitting  technology 
workers  into  the  country — the  H-1B  and 
the  L-l — immigration  experts  initially 
believed  that  Bush’s  proposal  would  target 
low-skilled  workers,  such  as  migrant  farm 


Sen.  Tom  Daschle 
wants  to  curb 
the  export  of  jobs. 


workers,  who  are  now  here  illegally.  How¬ 
ever,  Margaret  Spellings,  Bush’s  domestic 
policy  adviser,  said  in  a  January  speech  at 
the  Cato  Institute  that  the  program  would 
not  be  limited  to  any  specific  industries.  She 
added  that  it  could  include  nurses  and  teach¬ 
ers — two  groups  that,  like  tech  workers,  are 
already  covered  by  the  H-1B  program. 

“Does  it  mean  we  can  bring  in  pro¬ 
grammers  at  $10  an  hour  because  no 
American  would  take  that  job  [at  that 
wage]?”  asks  John  Bauman,  president  of 


the  Organization  for  the  Rights  of  Ameri¬ 
can  Workers,  an  advocacy  group.  In  that 
case,  Bauman  sees  little  hope  for  unem¬ 
ployed  American  tech  workers  to  find  jobs 
if  the  plan  moves  forward. 


Congress  Runs  for  Cover 

The  president’s  plan  could  face  an  uphill 
battle  in  Congress,  which  has  to  approve  it. 
Lawmakers  are  getting  nervous  about  how 
the  controversy  over  immigration  and  off¬ 
shoring  will  play  during  an  election  year. 
Legislation  limiting  offshore  outsourcing — 
a  provision  sponsored  by  Sens.  Craig 
Thomas  (R-Wyo.)  and  George  Voinovich 
(R-Ohio)  in  an  omnibus  appropriations  bill 
enacted  in  January — forbids  private  com¬ 


panies  with  government  contracts  from 
sending  that  work  offshore. 

Because  the  provision  expires  at  the  end 
of  September,  some  political  observers  are 
calling  it  “political  cover”  to  appeal  to  vot¬ 
ers  still  worried  about  jobs.  Voinovich, 
who  is  up  for  reelection  this  fall,  recently 
attributed  job  losses  in  his  home  state  in 
part  to  “the  mismanagement  of  our  trade 
policies.” 


President  Bush’s  advisers 
see  long-term  economic 
benefits  to  offshore  and 
immigrant  labor. 


But  the  vote  may  also  signal  a  growing 
rift  in  the  GOP  over  globalization,  says 
Catherine  Mann,  a  senior  fellow  at  the 
Institute  for  International  Economics,  a 
nonpartisan  think  tank  that  specializes  in 
international  economic  policy.  Mann  says 
that  CIOs  should  be  wary.  “The  message  is 
that  the  march  of  globalization  into  the 
halls  of  the  white-collar  workforce”  has 
made  jobs  a  more  sensitive  issue  for  politi¬ 
cians  courting  the  middle  class,  she  says. 
“They  ought  to  be  aware  that  the  strategy 
of  globalization  is  under  closer  scrutiny.”  In 
fact,  Democrats  have  vowed  to  make  off¬ 
shoring  a  central  theme  for  campaigns  this 
fall.  Senate  Minority  Leader  Tom  Daschle 
(D-S.D.)  has  introduced  a  bill  that  would 
require  companies  outsourcing  more  than 
15  jobs  offshore  to  disclose  that  fact  and 
give  workers  three  months’  notice. 

All  this  leaves  CIOs  who  are  trying  to 
craft  outsourcing  plans  in  a  tight  spot. 
Mann  says  that  the  spending  bill  could  be 
the  beginning  of  a  trend.  “CIOs  need  to 
consider  that  if  companies  fail  to  come  up 
with  reasonable  strategies”  to  keep  workers 
employed  when  jobs  go  offshore,  “then  it  is 
possible  that  the  political  response  will  be  to 
limit  what  [companies]  can  do,”  she  says. 

-Ben  Worth en 
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NO  MATTER  HOW  MUCH  OIL  IS  ON  THE  HINGES 
THIS  DOOR  IS  DIFFICULT  TO  OPEN. 


Once  you  go  in,  you  have  to  take  control: 

Of  a  meeting,  of  a  strategy,  of  the  future  of  an  enterprise. 

With  our  Associates  on  your  project,  with  their  skills  and  experience 

It’s  easier  to  take  control. 

It’s  easier  to  open  that  door. 


We’re  Resources  Connection. 
We  create  value  for  clients  by 
helping  them  execute  their 
strategies  more  cost-effectively. 
We  began  as  part  of  a  Big  Four 
firm;  now  we  are  independent 
and  publicly  traded.  Our 
heritage  attracts  the  best  project 
specialists,  veterans  of  the  Big 
Four  firms  and  FORTUNE  500“ 
companies  —  so  they  know  how 
it  feels  to  open  that  door. 


RESOURCES 


Get  there  until  people  who  have  been  there  before." 

Finance  aiul  Accounting,  HR,  IT,  Internal  Audit  and  Supply  Chain 


800-900-1131 

resourcesconnection.com 


terms  related  to  “wardrobe  malfunction”  was 
about  the  same  as  those  who  sought  news 
and  information  about  Osama  bin  Laden,  the 
World  Trade  Center  and  Pentagon  in  the 
wake  of  the  Sept.  11, 2001,  terrorist  attacks. 

Jackson’s  exposure  received  350  times  as 
many  requests  as  Super  Bowl  MVP  Tom 
Brady,  five  times  as  many  searches  as  space 
shuttle  Columbia  on  the  day  it  exploded,  and 
three  times  as  many  searches  as  the  2000 
election  on  the  day  after  it  occurred. 


Looking  for  Janet 


JANET  JACKSON’S  PARTIAL  NUDITY 

during  last  month’s  Super  Bowl  halftime 
show  was  the  most  searched-for  item  in  the 
history  of  the  search  engine  Lycos,  according 
to  “The  Lycos  50  Daily  Report.” 

The  number  of  Web  surfers  who  entered 


trendlines 


From  IT  With  Love 

We  found  four  inventions  to  bring  out  a 
CIO’s  inner  secret  agent 


Executive  Laptop  Steering  Wheel  Mount 

Arkon  Resources’  Executive  Laptop  Steering 
Wheel  Mount  turns  your  automobile  into  The 
Officemobile.  This  gizmo  affixes  your  laptop 
to  the  front  of  your  steering  wheel  so  you  can 
get  busy  while  on  the  road.  This  product  will 


set  you  back  $49.95  (plus  the  potential  cost 
of  an  insurance  rate  adjustment).  CIO 
recommends  that  this  product  be  used  in  a 
parking  lot  with  the  engine  turned  off. 

WARNING:  May  cause  you  to  enjoy 
gridlock  traffic. 


Night-Vision  Contact  Lenses 

Sick  of  strapping  on  those 
clunky  night-vision  goggles 
after  dark?  Aren’t  we  all.  Now, 
for  a  mere  $300,  you  can  have 
your  own  night-vision  contact 
lenses  from  Phoenix  Sight.  The 
contacts  enhance  ambient  light 
by  as  much  as  200  percent. 
While  ordinary  night-vision 
goggles  need  frequent  battery 
replacement  to  continue 
operation,  the  night-vision 
contacts  are  recharged  within 
the  blink  of  the  eye— literally. 
One  bat  of  the  lashes  restores 
the  lenses  to  full  power. 
WARNING:  Losing  one  of  these 
in  the  dark  is  a  lost  cause. 


The  Finger  Whisper  Mobile  Phone 

Can’t  stand  toting  around  that  cell  phone? 

Then  let  your  fingers  do  the  listening.  Now 
under  development  at  the  Japanese  mobile 
phone  giant  NTT  DoCoMo,  the  Finger  Whisper 
is  a  wristband  telephone  that  doesn't  require  a 
handset.  To  answer,  a  user  simply  touches  his 
forefinger  to  his  thumb  and  chats  away.. .into 
his  wrist.  A  wristband  equipped  with  a  micro¬ 
phone  acts  as  the  mouthpiece.  Users 
announce  a  numberto  dial  into  the  wristband. 
The  Finger  Whisper  converts  sound  vibrations 
into  decipherable  dialogue 
when  the  finger  is  inserted  into 
the  ear. 

WARNING:  Wax-filled  ears 
may  lead  to  bad  reception. 


E-Blue  Erasable  Ink 

Computers  didn't  lead  to  less  paper, 
did  they?  Flere's  an  idea:  Toshiba  has 
devised  “e-blue,"  an  erasable  toner 
technology  that  can  cut  paper  use  by 
a  dramatic  margin.  Using  a  portable 
eraser  machine,  the  special  carbon- 
free  toner  is  removed  from  stacks  of 
paper.  This  means  you  can  reuse  the 
paper  many  times  over.  The  e-blue 
system  is  available  in  Japan,  but 
Toshiba  isn’t  quoting  prices.  Great  for 
the  environmentally  conscious  CIO 
and  staff. 

WARNING:  Not  for  use  on  financial 
statements  covered  by  Sarbanes- 
Oxley. 

v _ _y 


ADMIT  IT.  You  wish  you  had  your  own  Q,  someone  like  James  Bond’s 
inimitable  British  Secret  Service  colleague  who  has  enough  gadgets  to 
save  Western  civilization— or  help  you  wring  more  time  out  of  an 
action-packed  day.  We  all  appreciate  the  simple  genius  of  a  clever 
device.  That  got  us  searching  for  the  perfect  set  of  products  to  put  a 
bass-line  guitar  riff  in  your  step.  Take  the  tour  below.  -Daniel  J.  Morgan 
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Tact: ling  Business  and  IT  Alignment 
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Eliminating  Roadblocks  to 
IT  and  Business  Alignment 


Doing  the  Right  Things 
and  Doing  the  Right 
Things  Right  Require 
Executive  Agreement  on 
What  Really  Are  the 
Right  Things 


"Right  now  alignment  is  the  big  deal.  We're  seeing  a  sea  change  in  the  economy 
that  is  spurring  renewed  emphasis  on  profitable  growth  and  the  reemergence  of 
technology  as  a  valuable  contributor  to  business  strategy  and  the  performance 
of  business  operations. 

"But  IT  organizations  can't  catch  the  wave  if  executives  can't  define  the  role  of 
technology  in  the  business  and  agree  on  the  role  they  want  CIOs  to  play. " 


Thought-provoking  responses  from  200 
global  IT  executives  in  a  new  Deloitte 
Consulting  LLP  survey  reveal  formidable 
roadblocks  to  the  alignment  of  IT  and  cor¬ 
porate  strategies: 

•  Although  a  shared  IT/business  agenda  is 
seen  as  a  highly  desirable  goal  with  sig¬ 
nificant  profitability  and  productivity 
benefits,  achieving  alignment  proves 
difficult  because  of  conflicting  opinions 
among  corporate  executives  about  the 
role  IT  should  play  in  the  business. 

•  Similarly,  alignment  is  impeded  by  confu¬ 
sion  among  IT  executives  between  their 
view  of  the  desired  role  for  IT  and  the 
actual  role  that  IT  plays  in  the  business. 

The  comprehensive  Deloitte  Consulting 
survey,  which  gathered  responses  on  a 
range  of  IT  alignment  issues  and  was  con¬ 
ducted  in  October  2003  by  IDG  Research 
Services  Group,  presents  a  striking 
acknowledgment  by  IT  executives  that 
alignment  is  very  important,  but  that 
2  ©  2004  Deloitte  Development  LLC.  All  rights  reserved. 


Ann  Senn,  Deloitte  Consulting  LLP 
Global  IT  Strategy  Leader 

efforts  to  achieve  it  have  been  largely 
unproductive.  In  fact,  96%  of  IT  execu¬ 
tives  predict  that  a  "significant"  or  "mod¬ 
erate"  positive  bottom-line  impact  could 
be  achieved  in  their  businesses  if  an  IT 
strategy  were  specifically  developed  to 
serve  the  corporate  strategy. 

"Everyone's  talking  about  getting  IT  aligned 
with  the  business  because  everyone  under¬ 
stands  the  positive  implications,"  says  Ann 
Senn,  Deloitte  Consulting's  Global  IT 
Strategy  Leader.  "And  while  most  business¬ 
es  are  trying  to  do  something  to  get  there, 
very  few  are  doing  it  well. ..today. 

"A  thorough  analysis  of  our  survey  results 
shows  that  while  only  about  1 0%  [of  IT 
leaders]  are  doing  it  well,"  she  adds,  "we 
can  see  from  their  responses  that  the 
good  work  they  are  doing  to  achieve 
alignment  is  paying  dividends." 

Survey  results  reveal  two  prevalent  and 
conflicting  views  about  what  really  are  the 
right  things  that  IT  should  be  doing: 
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•  IT  is  "table  stakes" — the  business 
should  invest  only  in  the  basic  capabili¬ 
ties  required  to  support  business  opera¬ 
tions  and  record  transactions,  and  focus 
on  operating  those  capabilities  as 
cheaply  as  possible. 

versus... 

•  IT  is  a  critical  capability — the  business 
should  use  IT  for  operational  and  com¬ 
petitive  advantage,  and  invest  in  IT  to 
grow  revenue  and  deliver/protect 
margins. 

Executives  often  disagree  on  what  they 
want  from  their  CIOs: 

•  Do  they  want  a  service-minded  CIO  who 
"gets  the  job  done" — someone  who 
quickly  and  effectively  reacts  to  the 
demands  of  the  business  and  capably 
manages  the  company's  technology  and 
people? 

•  Or,  do  they  want  a  business  leader — a 
CIO  who  provides  ideas  on  where  and 
how  information  and  technology  can  be 
exploited  for  operational  and  competi¬ 
tive  advantage? 

These  challenges  are  revealed  in  survey 
responses  that  show  global  IT  organiza¬ 
tions  are  increasingly  frustrated  in  their 
efforts  to  take  advantage  of  the  strategic 
opportunities  of  IT/business  alignment. 

While  the  obstacles  are  discussed  in  the 
context  of  IT,  the  consequences  affect 
every  area  of  the  organization,  preventing 
true  alignment  of  business  and  IT  agendas 
and  the  solid  performance  that  can  result. 

The  most  recent  Deloitte  Consulting  sur¬ 
vey  follows  the  2002  Deloitte 
Consulting/IDG  survey,  which  looked 
closely  at  IT  value  and  elicited  responses 
from  a  different  group  of  CIOs  about  their 
organizations'  perception  of  IT  value. 
Survey  participants  in  2003  were  IT  execu¬ 
tives,  all  at  the  director  level  and  above, 
representing  manufacturing,  finance,  gov¬ 
ernment  and  consumer  businesses  with 
mean  annual  revenues  of  $1 .8  billion. 

This  new  report  details  the  survey  results 
and  provides  analysis,  commentary, 
charts,  CIO  case  studies  and  some  advice. 
The  goal  is  to  help  executives  recognize 
the  work  yet  to  be  done  to  gain  IT/busi¬ 
ness  alignment,  understand  the  impact  of 
misalignment  and  mitigate  its  costly,  dis¬ 
ruptive  effects. 


What  does  Business/IT  Alignment  mean? 


/  Business  \ 

*  Goals  k 
\  /  \ 


Business  Objectives\ 


Inbound  Outbound 

Logistics  Operations  Logistics 


Sales  & 
Marketing 


Services 


Primary  Business  Activities 


In  simple  terms, 
the  goal  of 
Business/IT 
Alignment  is  to  ... 

\ 

\ . 

1  Ensure  that  every 

•  single  action 

performed  by  IT 
individuals  is 
focused  on  building 
and  delivering 
shareholder/ 
stakeholder  value 
by  supporting 
business  operations 
and/or  achieving 
business  goals 


At  first  glance,  survey 
responses  appear  rosy. 
Digging  deeper,  there’s 
evidence  of  conflict. 

Many  of  the  responses  to  questions  that 
center  on  IT's  role  in  the  business  and  on 
IT  alignment  are  very  encouraging.  But 
when  one  digs  deeper  into  the  questions 
and  answers,  conflicts  and  confusion 
become  increasingly  evident,  and  road¬ 
blocks  to  alignment  emerge. 

On  the  encouraging  side,  63%  of  IT  exec¬ 
utives  say  top  management's  perception 
of  the  value  that  IT  provides  to  the  busi¬ 
ness  is  accurate — a  significant  improve- 
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What  level  of  positive  impact  on  your  overall  company  bottom  line 
would  you  predict  could  be  achieved  as  a  result  of  aligning  each  of 
the  following? 


80% 


IT  operational  goals  matched  to  corporate  business  goals 

37% 


75% 


IT  organization  and  governance  specifically 
aligned  with  corporate  structure/governance 


IT  operations  and  organization  aligned  to  stated  IT  strategy 

—  54% 


70% 


70% 


IT  spending  explicitly  planned  and  measured  against  corporate  priorities 


70% 

IT  strategy  specifically  developed  to  serve  the  corporate  strategy 

36% 

55% 

Relevant  IT  performance  metrics  expressed  in  terms  WM  Less-aligned  companies 
relevant  to  and  understood  by  the  corporate 

executives  (CEO,  CFO,  COO,  VP  Sales,  etc.)  Well-aligned  companies 


Percentage  of  respondents  saying  impact  would  be  significant 
(ranking  4  on  a  scale  of  1  to  4) 


Overall,  how  successful  has  your  company  been  in  its  work  to  align 
IT  in  each  of  the  following  areas? 


ment  over  what  their  counterparts  report¬ 
ed  a  year  ago,  when  only  about  half  of 
the  respondents  said  that  top  manage¬ 
ment's  perception  of  the  value  of  technol¬ 
ogy  was  correct.  This  year's  more  favor¬ 
able  response  represents  a  marked  and 
positive  change  in  an  area  of  key  impor¬ 
tance  to  IT  leaders. 

IT  leaders  feel  strongly  that  alignment  is 
key  to  building  IT  value.  When  presented 
with  several  IT  alignment  scenarios  and 
asked  to  predict  the  bottom-line  results: 

•  96%  of  IT  executives  predict  that  a  "sig¬ 
nificant"  or  "moderate"  positive  bot¬ 
tom-line  impact  could  be  achieved  by 
their  enterprise  if  an  IT  strategy  were 
specifically  developed  to  serve  the  cor¬ 
porate  strategy; 

•  90%  predict  that  a  "significant"  or 
"moderate"  positive  bottom-line  impact 
could  be  achieved  by  their  enterprise  if 
IT  operational  goals  matched  corporate 
business  goals; 

•  90%  predict  that  a  "significant"  or 
"moderate"  positive  impact  could  be 
achieved  by  their  enterprise  if  IT  spend¬ 
ing  were  explicitly  planned  and  meas¬ 
ured  against  corporate  priorities; 

•  89%  predict  that  a  "significant"  or 
"moderate"  positive  impact  could  be 
achieved  by  their  enterprise  if  IT  opera¬ 
tions  and  organization  were  aligned  to 
a  stated  corporate  strategy. 


80% 


IT  operational  goals  matched  to  corporate  business  goals 

■■7% 

50% 

IT  spending  aligned  with  corporate  priorities 

■  4% 

45% 

IT  operational  goals  aligned  with  corporate  business  goals 

IT  operations  and  organization  aligned  to  stated  IT  strategy 

■1 5%  _ 

40% 

IT  organization  and  governance  aligned  with 
corporate  structure/governance 


35% 

IT  performance  metrics  aligned 
with  corporate  executive  understanding 


1 


|  Less-aligned  companies 
Well-aligned  companies 


' 


Percentage  of  respondents  saying  alignment  has  been  “extremely  successful" 
(scoring  5  on  a  5  point  scale) 


Overall,  survey  responses  clearly  show 
that  IT  executives  are  very  aware  that  IT 
needs  to  be  involved  in  business  planning 
and  business  needs  to  be  involved  in  IT 
planning.  Seven  out  of  10  respondents 
report  that  IT  participates  to  a  significant 
degree  in  strategic  decisions  at  the  busi¬ 
ness  level,  and  more  than  nine  out  of 
1 0  report  that  top  management  collabo¬ 
rates  with  them  in  the  development  of  IT 
strategy. 

These  responses  indicate  that  IT  manage¬ 
ment  and  business  management  are  in 
sync  about  IT's  role. 

Technology  leaders  also  report  significant 
levels  of  success  in  their  efforts  to  achieve 
an  aligned  organization.  More  than  50% 
of  respondents  report  that  their  compa¬ 
nies  have  been  "extremely"  or  "very" 
successful  in  aligning  IT  operations  and 
the  organization  to  a  stated  IT  strategy 
(56%);  aligning  IT  strategy  with  corpo- 
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In  the  real  world,  many  factors  complicate  the  notion  of  Business/IT  Alignment 
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Limitations 
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rate  strategy  (55%);  aligning  IT  spending 
with  corporate  spending  priorities 
(52%);  and  aligning  IT  operational  goals 
with  corporate  business  goals  (51  %). 

Twenty  IT  executives — 10%  of  respon¬ 
dents —  report  that  their  enterprises  have 
been  "extremely  successful"  in  strategy 
alignment  efforts. 

This  strategically  well-aligned  10%  stand 
out  in  every  category.  They  are  eight  times 
more  likely  than  other  respondents  to 
describe  themselves  as  "extremely  suc¬ 
cessful"  in  aligning  IT  operational  goals 
with  business  goals,  and  five  times  more 
likely  to  say  they  are  "extremely  success¬ 
ful"  in  aligning  IT  spending  priorities  with 
business  spending  priorities.  And  they  are 
three  times  as  likely  as  other  respondents 
to  say  that  executive  management  has  the 
correct  perception  of  IT  value. 

Overall,  the  generally  upbeat  alignment 
responses  from  the  majority  of  IT  execu¬ 
tives  complement  the  sweepingly  positive 


statements  from  the  eight  out  of  1 0  who 
report  that  their  enterprises  have  a  defined 
corporate-level  business  strategy  (82%)  as 
well  as  a  defined  IT  strategy  (86%).  Among 
those  with  a  defined  corporate  business 


In  your  personal  opinion,  would  you  say  that  executive 
management's  perception  of  technology  value  to  your  company  is 
accurate? 


Yes,  it  is  accurate 


32% 


Nc 

. 


10% 

No,  value  is  understated 

8% 

5% 

No,  value  is  overstated 
Percentage  of  respondents 


61% 


85% 


Less-aligned  companies 
Well-aligned  companies 
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Please  rate  the  degree  to  which  each  of  the  following  poses  a 
barrier  to  effective  IT  alignment  in  your  organization. 


28% 


Ineffective  communication  of  business  strategy  and  goals  between 
business  management  and  IT  management 


28% 


Lack  of  budget  to  allocate  or  apply  to  creating  IT  Alignment  in  the  company 

30% 


Autonomous  culture  -  business  units/divisions  have  traditionally  made 
their  own  technology  decisions 


17% 


Weak  support  from  IT  management 


24% 


Lack  of  awareness  in  company  regarding  formal  IT  Value 
Management  and  Alignment 


.  .  ..-5.. _ |  ■ . 

10% 

Lack  of  defined  business  strategy 


19% 


Less-aligned  companies 
Well-aligned  companies 


Percentage  of  respondents 


strategy,  nearly  nine  out  of  10  IT  leaders 
say  the  strategy  is  effectively  communicat¬ 
ed  to  the  IT  organization. 

These  responses  hardly  suggest  evidence 
of  big  challenges,  but  rather  indicate  that 
the  tasks  of  role  identification  and  align¬ 
ment  have  been  very  well  begun. 


Elsewhere  in  the  survey,  some  responses 
present  a  paradox,  revealing  a  consider¬ 
able  degree  of  unresolved  conflict  and 
concern  within  the  CIO  group.  Their  mis¬ 
givings  come  through  clearly  and  repeat¬ 
edly. 

As  mentioned  previously,  70%  of  the 
executives  report  that  IT  has  a  place  at  the 
table  and  plays  a  "strategic"  role  in  the 
enterprise.  Additionally  more  than  90% 
say  executive  management  plays  a  visible 
role  in  IT  strategy  development. 

Given  the  nature  of  these  responses,  the 
IT  executives'  answers  to  survey  questions 
about  the  barriers  to  alignment  are  both 
unexpected  and  confusing: 

•  65%  of  the  same  IT  executives  say 
"ineffective  communication  of  business 
strategy  and  goals  between  business 
management  and  IT  management"  rep¬ 
resents  a  "significant"  or  "moderate" 
challenge; 

•  Nearly  half  (49%)  say  the  "lack  of  a 
defined  business  strategy"  is  a  "signifi¬ 
cant"  or  "moderate"  challenge; 

•  63%  say  a  prevailing  culture  that  allows 
business  units  to  make  their  own  tech¬ 
nology  decisions  is  a  "significant"  or 
"moderate"  challenge;  and 

•  More  than  half  (55%)  cite  "weak  sup¬ 
port  from  senior  business  management" 
as  a  "significant"  or  "moderate" 
challenge. 

The  well-aligned  10%  provide  clues  to  the 
underlying  conflict.  In  each  of  the  chal¬ 
lenges  to  alignment  cited  by  their  col¬ 
leagues,  they  are  far  less  likely  to  show 
signs  of  pain.  For  example,  the  well- 
aligned  are  half  as  likely  to  cite  absence  of 
a  defined  business  strategy  and  three 
times  less  likely  to  cite  "weak  support 
from  senior  business  management"  as 
obstacles  to  alignment. 


Do  the  responses 
represent  reality  or 
aspiration? 

So  why  are  only  about  half  of  the  IT  exec¬ 
utives  reporting  strong  success  in  their 
alignment  efforts  to  date?  With  such 
broad  recognition  of  the  value  of  align¬ 
ment  and  such  strong  efforts  on  the  part 
of  both  business  and  IT  toward  the  goal, 
what  then  stands  in  the  way? 
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"Conflict  is  rooted  in  the  very  different 
perspectives  various  executives  bring  to 
common  issues — in  this  case,  IT,"  says 
Deloitte  Consulting's  Senn.  "Most  CEOs 
love  the  products,  love  the  customers  and 
hate  getting  into  details.  They  are  superb 
at  delegating." 

Good  CIOs  deal  in  explicit  facts,  lots  of 
them,  and  struggle  with  ambiguity.  They 
have  overwhelming  "today"  challenges — 
project  delivery,  applications  mainte- 
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nance,  costs,  vendors,  risk  management 
and  people  problems.  "Their  jobs  cry  for 
decisive,  thoughtful  action,"  Senn  says. 

Other  sources  of  conflict  include  the 
timeframes  and  level  of  detail  at  which 
the  executives  build  strategies  and  plans. 
Most  corporate  strategies — even  those 
that  are  clearly  outlined  and  well  commu¬ 
nicated — are  insufficiently  detailed  to 
provide  strong  guidance  to  the  CIO  in 
setting  a  technology  direction.  Couple 
that  with  the  fact  that  technology  infra¬ 
structures  generally  outlast  the  business 
models  and  the  strategies  they  were 
intended  to  support  by  a  factor  of  3  to 
20  times,  and  the  disconnect  becomes 
evident. 

"Alignment  doesn't  happen  at  a  corpo¬ 
rate  strategy-IT  strategy  level — although 
that  is  a  start,"  says  Senn.  "Nor  is  it  even 
achieved  when  business  unit  plans  match 
IT  plans  and  vice  versa — although  at  that 
point  things  are  pretty  good.  Alignment 
really  is  only  achieved  through  executive 
teaming — agreement  on  the  role  of  IT  and 
the  role  of  the  CIO  and  living  up  to  that 
agreement  daily. " 

Inside  the  alignment 
challenge 

Like  Deloitte  Consulting's  Senn,  others 
see  the  alignment  challenge  resulting 
from  economic  shifts — shifts  that 
challenge  the  already  tenuous  alignment 
among  all  business  functions.  Ken 
Horner,  Deloitte  Consulting's  US  IT 
Strategy  Practice  Leader,  attributes  it  to 
rapid  economic  upheaval.  "You  don't 
really  go  through  the  kind  of  a  cycle 
we've  been  through  and  remain 
unscathed,"  he  says.  "Rational  human 
beings  don't  react  well  to  gigantic  ups 
and  downs."  In  the  wake  of  this  upheaval 
and  the  resulting  layoffs  and  cost-cutting, 
Horner  says,  IT  organizations  need  to 
rebuild  their  purpose  and  focus. 

Irwin  Goverman,  a  former  CIO  and  cur¬ 
rent  Life  Sciences  Principal  in  Deloitte 
Consulting's  IT  Strategy  Practice,  pin¬ 
points  the  IT-fueled  Internet  boom  of  the 
late  1 990s  as  one  of  the  root  causes  of 
today's  situation.  "During  the  dot-com 
boom,  we  saw  IT  as  an  enabler  of  busi¬ 
ness  operations  and  strategy.  IT  was  at 
the  core  of  services  and  products  being 
offered  and  formed  the  backbone  of  the 
business  operations,"  he  says.  "In  many 
organizations  now,  IT  isn't  being  viewed 


as  the  strategic  capability  it  once  was. 

"A  few  years  ago,  it  was  common  for  the 
CIO  to  report  directly  to  the  CEO  and  to 
be  in  the  thick  of  strategy  planning," 
Goverman  says.  "But  right  now  we  are 
seeing  a  trend  of  CIOs  reporting  to  a  CSO 
[Chief  Strategy  Officer],  CFO  or  even 
comptroller.  On  the  other  hand,  we  are 
also  seeing  CIOs  with  broader  job  respon¬ 
sibilities — assuming  leadership  of  cus¬ 
tomer  management  or  even  supply  chain 
operations." 

"There  is  a  curious  polarization  of 
approaches  to  IT  even  within  industries," 
observes  Senn.  "Some  companies  are 
embracing  and  leading  with  technolo¬ 
gy — believing  in  the  power  of  IT,  effec¬ 
tively  deploying  it  and  ultimately  deliver¬ 
ing  impressive  operating  results.  Others 
display  an  almost  'IT-phobic'  reaction, 
actively  pushing  IT  off  the  business  agen¬ 
da  and  out  of  executive  priorities. 
Interestingly,  in  many  of  these  compa¬ 
nies,  IT  is  embedded  in  business  opera¬ 
tions,  and  the  IT  operations  themselves 
are  sizable,  mission-critical  and  costly. 
While  recognizing  that  IT  is  important  to 
business  operations,  executives  in  these 
companies  view  IT  as  'table  stakes' — a 
necessary  capability,  but  not  one  to  be 
exploited  for  advantage." 

Whatever  the  approach  to  setting  IT 
direction  and  managing  IT,  CIOs  and 
other  business  executives  are  aware  of 
the  crucial  role  IT  plays  in  day-to-day 
business  operations  and  in  the  long-term 
health  of  a  business.  "There  isn't  a  com¬ 
pany  in  the  marketplace  that  isn't  affect¬ 
ed  dramatically  by  the  performance  of  its 
IT  assets,"  Horner  says.  "You  simply 
can't  do  business  without  this  capability 
anymore." 


What  can  organizations 
do  to  improve  business/IT 
alignment? 

There  are  any  number  of  popular 
approaches  and  tools  all  aimed  at  improv¬ 
ing  business/IT  alignment.  Survey  respon¬ 
dents  cite  the  activities  they  plan  to  pur¬ 
sue  in  the  next  12  months  to  improve 
alignment,  among  them:  IT  strategy 
development  and  deployment  (70%);  IT 
budget  allocation  (68%);  IT  organizational 
review  and  restructuring  (60%);  and  IT 
portfolio  mapping  (60%).  These  are  all 
worthwhile  efforts.  But  what,  really,  is  the 
"magic  formula" — the  right  combination 


“Alignment  doesn’t 
happen  at  a  corporate 
strategy-IT  strategy 
level — although  that  is  a 
start.  Nor  is  it  even 
achieved  when  business 
unit  plans  match  IT  plans 
and  vice  versa — although 
at  that  point  things  are 
pretty  good.  Alignment 
really  is  only  achieved 
through  executive 
teaming — agreement  on 
the  role  of  IT  and  the  role 
of  the  CIO  and  living  up  to 
that  agreement  daily.” 

Ann  Senn 

Deloitte  Consulting  LLP 
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that  sets  apart  those  companies  that  real¬ 
ly  succeed  at  alignment  versus  those 
mired  in  marginal  improvement? 

Three  observed 
characteristics  of 
well-aligned  companies 

In  Deloitte  Consulting's  experience,  there 
are  three  characteristics  that  distinguish 
the  companies  that  are  more  successful  in 
aligning  IT  and  business: 

•  Executive  agreement  on  the  role  of  IT — 
where  and  how  IT  adds  value  to  the 
business; 

•  Executive  agreement  on  the  right 
things — the  right  priorities  and  focus 
areas  for  IT; 

•  Doing  the  right  things  right — following 
through  and  delivering  against  expecta¬ 
tions. 

Executive  agreement  on  the  role  of  IT 
involves  detailing  business  and  technolo¬ 
gy  aspirations  and  expectations,  and 
determining  where  IT  fits  from  an  enter¬ 
prise-level  standpoint  regarding  strategy, 
spending  and  operations.  "It's  critical  that 
IT  develop  the  sense  of  self,"  says  Deloitte 
Consulting's  Horner.  "Where  am  I  now? 
What  can  I  do?  What  can  I  do  well?  What 
are  my  shortcomings?  Where  do  I  need  to 
strengthen  my  own  capabilities?  That 
self-knowledge  is  as  essential  to  an  IT 
organization  as  it  is  to  an  individual  trying 
to  be  successful." 

With  this  understanding,  the  enterprise 
has  a  much  better  chance  of  coming  to 
agreement  on  the  nettlesome  questions 
of  where  to  spend  on  IT,  how  much  and 
how  fast. 

While  noting  that  many  of  his  colleagues 
are  embarking  on  IT  strategy  and  restruc¬ 
turing  efforts,  John  Stevenson,  CIO  of 
Sharp  Electronics,  cautions  them  to  keep 
an  eye  on  the  delicate  balance  between 
strategic  intentions  and  pragmatic  day- 
to-day  operational  needs.  "There's  a  very 
fine  line  between  pursuing  the  big  pic¬ 
ture  of  IT— building  overall  strategic 
capability  for  the  company — and  balanc¬ 
ing  the  'what's  in  it  for  me'  demands  of 
your  business  peers,"  he  says.  "That  can 
be  tricky.  But  if  done  well,  it  can  be 
extremely  rewarding."  (For  more  on 
Stevenson's  experience,  see  "Case  Study: 
Sharp  Electronics,"  p.  9.) 
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"Effective  IT  delivery  and  management 
are  also  important,"  adds  Horner.  IT  is 
often  a  big — and  yes,  expensive — "mis¬ 
sion-critical"  business  operation  in  its 
own  right.  "IT  organizations  that  don't 
effectively  manage  IT  operations  and 
technology,  or  that  fail  to  deliver  against 
expectations,  frankly  aren't  credible 
with  other  business  executives.  Efficient, 
smooth  IT  operations  are  an  important 
alignment  goal,"  he  says.  "IT  needs 
to  operate  as  a  cog  in  the  overall 
business  machine — fitting  into  every¬ 
thing  else." 

Aligning  business  and  IT  should  be 
approached  methodically,  holistically 
and,  perhaps  most  importantly,  in  the 
right  order.  If  the  business  is  not  crystal 
clear  on  what  role  IT  is  going  to  play, 
it  is  impossible  to  know  where  to  spend 
IT  dollars,  and  even  harder  to  spend 
those  dollars  in  an  efficient  manner. 
According  to  Jean-Claude  Aube,  a 
Deloitte  Consulting  Canada  principal, 
"The  approach  to  alignment  should 
include  both  current-environment  needs 
and  strategic  intentions.  If  you  jump 
directly  to  a  tactical  solution  and  skip  the 
higher-end  analysis,  you  might  wind  up 
rearranging  the  deck  chairs  on  the 
Titanic.  You  don't  have  a  'big  picture' 
perspective." 

Let's  explore  the  characteristics  in  more 
detail. 

Characteristic  #1: 

Executive  Agreement  on 
the  Role  of  IT 

It's  of  paramount  importance  for  IT  and 
the  rest  of  the  business  to  get  a  handle  on 
such  questions  as:  How  effectively  are  IT 
assets  being  used?  How  effectively  are  IT 
resources  being  deployed?  What  is  the 
state  of  the  current  systems?  Where  do 
we  need  to  spend  on  IT?  What  is  and 
should  be  the  ratio  of  "lights  on,  doors 
open"  IT  spend  versus  strategic  capability 
spend? 

"A  CEO  will  say,  'I  spend  millions  on  IT 
and  I  can't  get  anything  new  out  of 
them,"'  says  Goverman.  "But  even  if 
you  are  very  lucky,  only  20%  to  50%  of 
your  money  is  going  toward  new  stuff. 
You've  also  got  to  look  at  where  the 
other  50%  to  80%  of  the  money  is 
going.  This  assessment  is  very  impor¬ 
tant.  Understanding  where  you  are 
spending  today  sets  you  up  to  make 
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J ~ol/w 

Sharp  Electronics 

Getting  Started  on  the  Road  to  Alignment 

When  John  Stevenson  joined  Sharp  Electronics  as  CIO  in 
2003,  he  figured  there  would  be  challenges  on  the  way 
to  strategically  aligning  IT  with  the  business.  Challenge 
No.  1 ,  he  says,  is  that  business  counterparts — the  vice 
president  of  marketing,  for  example,  or  the  vice  president 
of  manufacturing — get  paid  to  take  care  of  their  siloed 
business  functions.  "Often  what  CIOs  are  attempting  to 
do  is  to  take  that  particular  component  and  try  to  align  it 
in  all  of  the  upstream,  downstream,  internal  and  external 
processes  to  make  the  company  run  better,"  he  says.  That 
means  that  the  CIO  can  run  into  business-priority  issues, 
along  with  challenges  procuring  financial  support  from 
various  unconnected  groups  for  cross-functional  changes. 
"Sometimes  you  need  two  or  three  constituents  to  make 
a  complete  plan  happen,"  he  says. 

At  Sharp,  one  way  Stevenson  and  his  organization  are  work¬ 
ing  toward  alignment  is  by  positioning  "IT  knowledge  lead¬ 
ers"  in  key  business-focused  meetings.  "If  the  marketing 
group  has  a  series  of  leadership  meetings,  an  IT  marketing 


specialist  should  be  there 
to  understand  how  they're 
thinking  and  what  they're 
doing,"  he  says.  But,  he 
warns,  "That  takes  time 
and  patience,  and  it's  only 
as  effective  as  the  capability  of  the  person  you  assign  from  IT 
to  fill  the  role." 

As  for  what  benefit  strategic  alignment  can  offer  the 
business,  he  has  two  simple  words:  no  waste.  "With  a 
solid  understanding  of  the  key  business  drivers  and  lead¬ 
ership  priorities,  you  can  be  better  at  not  over-  or  under¬ 
estimating  the  IT  capabilities  that  the  business  needs  and 
can  effectively  use.  You  should  be  able  to  put  it  spot  on." 

To  CIOs  seeking  alignment  Stevenson  offers  the  following 
advice:  "Get  to  know  your  own  IT  capabilities. 

Understand  the  gifts,  gaps  and  capabilities  you  have,  and 
categorize  those  carefully.  Then  you're  in  a  position  to 
wisely  approach  the  business  with  a  real  understanding  of 
your  own  group's  environment  and  potential."  • 


better  decisions  going  forward." 


correctly  skilled  IT  organization. 


It  would  seem  a  given  that  highly  success¬ 
ful  global  corporations— with  billions  of 
dollars  in  annual  revenue  and  millions  to 
billions  tied  up  in  IT  investments — would 
have  an  accurate  view  of  the  role  IT  plays 
in  their  organizations,  but  the  Deloitte 
Consulting  survey  responses  indicate  that 
that  view  still  eludes  many. 

In  a  survey  group  in  which  70%  of  IT  exec¬ 
utives  say  their  organizations  play  a  "strat¬ 
egy"  role  in  their  enterprises,  and  in  which 
more  than  eight  of  10  report  that  the 
enterprises  have  well-defined  business  and 
IT  strategies,  just  37%  of  IT  executives 
report  that  their  enterprises  have  been 
"extremely"  or  "very  successful"  in  devel¬ 
oping  a  correctly-sized  IT  organization. 

Again,  the  strategically  well-aligned  1 0% 
stand  in  sharp  contrast.  They  are  about 
five  times  more  likely  to  say  they  have 
been  "extremely  successful"  in  develop¬ 
ing  a  correctly-sized  IT  organization,  and 
about  three  times  more  likely  to  offer  that 
response  regarding  the  development  of  a 


Still,  the  conflicting  responses  of  the  vast 
majority  are  among  the  reasons  that 
developing  a  technology  profile  is  the  first 
step  for  organizations  seeking  alignment. 
IT  simply  cannot  be  a  strategic  match 
unless  high-level  executives  have  thought 


Overall,  how  successful  has  your  company's  IT  alignment  efforts  been 
in  achieving  a ...? 


7% 


35% 


Correctly  Sized  IT  Department 

4% 


Effective  IT  Organization  Structure/Governance 

7% 


30% 

Less-aligned  companies 
Well-aligned  companies 


Percentage  of  respondents  saying  they  have  been  “extremely  successful 
(scoring  5  on  a  5  point  scale) 
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IfaaraOref  Cfrr+oi/K 

Coca-Cola  Enterprises 

Learning — and  Speaking — the  Language  of  Business 

As  CIO  of  Coca-Cola  Enterprises,  Margaret  Carton  oversees 
an  IT  organization  of  1,000  people.  The  biggest  challenge 
to  alignment  that  she  sees  is  that  IT  isn't  always  in  the 
room  when  business  people  are  discussing  business  strate¬ 
gy.  "Often  critical  IT  discussions  will  happen  late  in  the 
process  unless  there's  some  lucky  coincidence  and  some¬ 
one  remembers,  'Oh,  the  IT  person  mentioned  something 
about  that  yesterday — maybe  we  ought  to  bring  IT  into  this 
discussion.'  Including  IT  resources  should  be  a  natural  part 
of  redesigning  business  process  because  of  the  value  tech¬ 
nology  can  bring  to  enabling  most  aspects  of  business 
transformation."  Since  happenstance  involvement  in  busi¬ 
ness  strategy  simply  isn't  sufficiently  reliable  to  bank  the 
company's  IT  investment  plans,  Coca-Cola  Enterprises  is 
redesigning  the  IT  governance  process  to  include  business 
process  advisory  councils.  These  councils  are  led  by  busi¬ 
ness  counterparts  who  have  the  responsibility  of  propos¬ 
ing,  examining  and  prioritizing  IT  projects. 

A  second  challenge  is  that  members  of  the  IT  organization 
are  sometimes  perceived  as  technologists  who  don't  speak 


the  business  language. 

"We  have  to  be  able  to 
talk  in  the  language  that 
business  is  comfortable 
with — the  language  of 

business  operations  and  business  benefit,"  Carton  says. 

"To  shatter  those  perceptions,  we  often  recruit  business 
operations  people  to  join  our  business  application  manage¬ 
ment  teams,  consisting  of  both  business  and  technology 
professionals.  These  teams  are  devoted  to  improving  busi¬ 
ness  operations  and  effectively  use  technology  to  create 
and  deliver  business  value." 


In  addition,  IT  professionals  at  Coca-Cola  Enterprises  are 
continually  upgrading  their  knowledge  of  day-to-day 
business  operations.  For  example,  when  IT  launches  an 
RFID  initiative,  CCE  IT  professionals  spend  significant  time 
in  a  plant  to  observe  operations  and  assess  how  the  initia¬ 
tive  will  likely  affect  particular  units  of  the  organization. 
"We  want  to  make  sure  that  we  understand  the  details 
of  the  business  operations  and  are  focused  on  creating 
and  delivering  business  value  in  everything  we  do," 

Carton  says.  • 


about  what  makes  the  most  business 
sense  and  where  the  business  believes  it 
will  achieve  the  highest  value  from  IT. 

Deloitte  Consulting  developed  a  model 
that  has  proven  helpful  to  the  role-defin¬ 
ing  process.  The  model  contains  four 
potential  roles  for  IT: 


Well-aligned  enterprises  understand  the  value  of  information  and 
technology  and  agree  on  the  role  of  IT 

Orientation 

Outward 

to 

Business 

Business  Business 

Partner  Leader 

Inward 

to 

IT 

Service  IT 

Provider  Entrepreneur 

Fast-follower  Leading  Edge 

Innovation 
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Business  Leader:  IT  is  a  strategic  asset 
essential  to  driving  growth  and  profitabili¬ 
ty.  IT  is  viewed  (and  funded)  as  a  competi¬ 
tive  differentiator; 

Business  Partner:  IT  is  essential  to 
achieving  business  operational  objectives. 
IT  is  focused  on  leveraging  technology  to 
explicitly  support  the  business  units  in 
achieving  plans; 

Service  Provider:  IT  may  be  essential  or 
important  to  efficient,  cost-effective  busi¬ 
ness  operations.  IT  is  focused  on  efficient 
technology  deployment  and  use  in  the 
business,  with  a  primary  emphasis  on  per¬ 
formance  and  cost; 

IT  Entrepreneur:  IT  is  a  revenue  genera¬ 
tor  or  a  profit  center  for  the  company, 
offering  IT  products  and  services  to  the 
market.  IT  is  focused  on  competitive  posi¬ 
tioning  and  performance  against  the  IT 
products  and  services  marketplace. 

Experts  caution  CIOs  against  thinking  of 


CIO  Advertising  Supplement 


some  of  the  categories  as  better  or  more 
important  than  others.  "We  shouldn't 
read  the  four  roles  as  one  is  good  and 
one  is  bad.  It's  perfectly  OK  to  be  an  IT 
service  provider,"  says  Aube.  "To  a  great 
extent,  the  role  of  IT  is  a  reflection  of  the 
needs  of  the  business  and  the  nature  of 
the  industry.  In  industrial  manufacturing, 
IT  is  seldom  seen  as  a  business  partner. 
On  the  other  extreme,  IT  is  integral  to 
the  business  strategies  of  wireless 
telecommunication  companies." 

CIOs  readily  admit  that  with  the  exception 
of  "IT  Entrepreneur,"  IT  organizations 
may  play  different  roles  at  different  times. 
"In  certain  areas  where  we're  finding 
process  gaps  or  areas  where  IT  can 
change  holistically  how  a  business  oper¬ 
ates  or  goes  to  market,  there  are  position¬ 
ing  opportunities,"  says  Sharp's 
Stevenson.  "Then  if  you're  careful  about 
how  you  fulfill  that  mission,  you  can  be 
considered  a  key  business  leader.  Every 
day  you  should  always  try  to  be  a  good 
business  partner,  and  every  day  you  must 
deliver  effective  services." 

According  to  Margaret  Carton,  CIO  of 
Coca-Cola  Enterprises,  the  role  of  IT  also 
varies  by  area  of  expertise.  "Mobile 
computing  is  an  area  where  we  have 
superior  expertise,  and  we  work  very 
closely  with  the  business,  driving  the 
business  forward  by  leveraging  mobile 
technology,"  she  says.  "Overall,  our 
goal  is  to  grow  our  business  and  tech¬ 
nology  expertise  and  therefore  CCE's 
ability  to  effectively  leverage  informa¬ 
tion  and  technology  for  profitable 
growth."  (For  more  on  Carton's  experi¬ 
ence,  see  "Case  Study:  Coca-Cola 
Enterprises,"  p.  10.) 

Stevenson  points  out  that  executives  from 
different  functions  may  view  IT  differently. 
"Certain  key  executives  at  any  particular 
time  may  say  the  IT  group  is  a  good  utili¬ 
ty — and  that  can  be  a  good  grade.  Every 
IT  group  needs  to  be  strong  at  delivery," 
he  says. 

"What  matters  most  is  that  enterprises 
take  a  hard,  honest  look  at  themselves 
and  make  realistic  decisions  about  what 
they  are,  where  they  are  going  and  what 
they  are  trying  to  accomplish,"  says 
Horner. 

Simply  put,  executives  need  to  agree  on 
the  role  and  contribution  of  IT  to  the 
business — whatever  it  is.  Organizations 
with  broad  executive  agreement  have 


either  solved  or  completely  sidestepped 
the  IT  identity  crisis  that  holds  others 
back. 

Characteristic  #2:  Doing 
the  Right  Things 

The  second  characteristic  of  well-aligned 
companies  is  the  ability  to  "bucket"  the 
business's  IT  assets  into  investment  cate¬ 
gories  within  an  overall  IT  portfolio.  For 
example,  establishing  what  portions  of  the 
IT  budget  will  be  spent  on  innovation, 
growth,  productivity  improvement,  mainte¬ 
nance  or  security,  and  what  portions  of  the 
IT  assets  are  supporting  various  aspects  of 
the  business  (business  units  or  business 
functions  such  as  finance  or  R&D).  The  trick 
is  structuring  the  portfolio  in  a  way  that  is 
consistent  with  the  business  aspirations 
and  operations,  as  well  as  the  role  of  IT  in 
that  picture.  Aube  says,  "While  it's  essential 
to  agree  on  whether  IT  is  fundamentally  a 
service  provider  or  a  business  partner,  the 
rubber  doesn't  hit  the  road  until  you  exam¬ 
ine  today's  IT  capabilities  and  those  needed 
to  drive  the  company  forward." 

Goverman  describes  this  process  as  IT 
governance.  "The  essence  of  IT  gover¬ 
nance  is  bringing  the  right  people  to  the 
table  to  have  the  right  conversation  with 
a  good,  informed  process  about  the  right 
places  to  spend  IT  dollars,"  he  says.  IT 
governance  involves  balancing  IT's  poten¬ 
tial  contribution  against  other  opportuni¬ 
ties  and  available  resources. 

Enterprises  often  get  a  serious  wake-up 
call  on  the  allocation  of  IT  funds  as  invest¬ 
ments  (project  portfolios)  are  analyzed.  For 
example,  in  one  organization  with  aggres¬ 
sive  growth  projections  and  goals,  an 
analysis  of  the  investment  portfolio 
showed  the  majority  of  funds  tied  up  in 
day-to-day  operations  and  process 
improvements,  with  only  a  few  dollars 
invested  in  revenue-producing  activities. 
"Clearly,  this  organization  wasn't  putting 
its  money  against  its  strategy,"  says  Senn. 
In  another  organization,  investment  port¬ 
folio  analysis  revealed  multiple  projects 
running  simultaneously,  all  going  against 
the  same  business  improvement  levers. 
"The  projects  were  essentially  competing 
for  the  same  benefits,  such  as  inventory 
reduction,  time  to  market  and  other  per¬ 
formance  improvements,"  says  Senn. 

"This  company  wasn't  going  to  achieve 
the  expected  benefits  across  the  board — 
project  sponsors  were  set  up  for  a  fall." 
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IT  simply  cannot  be  a 
strategic  match  unless 
high-level  executives  have 
thought  about  what  makes 
the  most  business  sense  and 
where  the  business  believes 
it  will  achieve  the  highest 
value  from  IT. 


An  effective  IT  governance  process  not 
only  provides  direction,  it  also  provides  a 
sanity  check  that  focuses  the  enterprise 
on  the  best  investment  mix — balancing 
strategy  against  the  needs  of  day-to-day 
operations  across  the  various  entities  that 
make  up  the  business. 

Characteristic  #3:  Doing 
the  Right  Things  Right 

Successful  companies  execute  well 
against  plan  and  deliver  against  expecta¬ 
tions.  To  put  it  simply:  once  you  figure  out 
what  to  do,  then  you  need  to  do  it. 

"Years  ago,  I  worked  with  a  strong  busi¬ 
ness  leader  who  was  fond  of  the  phrase 
'Give  me  a  'C'  plan  and  'A'  execution  over 
an  'A'  plan  and  'C'  execution  any  day,'" 
Senn  says.  "I  have  learned  just  how  right 
he  was  in  his  thinking.  Execution  is  essen¬ 
tial.  Organizations  that  fail  to  deliver  sim¬ 
ply  need  to  set  every  other  aspiration 
aside  until  they  learn  to  deliver  against 
expectation." 

Goverman  warns  that  organizations  need 
to  be  careful  to  recognize  the  relationship 
between  governance  and  delivery.  "I 
would  make  a  real  distinction  between 
governance — setting  direction  and  aiming 
the  organization — versus  delivery — effi¬ 
ciently  and  effectively  delivering  the  busi¬ 
ness  value,"  he  says. 


About  Deloitte 

Deloitte,  one  of  the  nation's  leading  profes¬ 
sional  services  firms,  provides  audit,  tax,  con¬ 
sulting,  and  financial  advisory  services 
through  nearly  30,000  people  in  more  than 
80  U.S.  cities.  Known  as  an  employer  of 
choice  for  innovative  human  resources  pro¬ 
grams,  the  firm  is  dedicated  to  helping  its 
clients  and  its  people  excel.  "Deloitte"  refers 
to  the  associated  partnerships  of  Deloitte  & 
Touche  USA  LLP  (Deloitte  &  Touche  LLP  and 
Deloitte  Consulting  LLP)  and  subsidiaries. 
Deloitte  is  the  U.S.  member  firm  of  Deloitte 
Touche  Tohmatsu.  For  more  information, 
please  visit  Deloitte's  Web  site  at 
www.deloitte.com/us. 

Deloitte  Touche  Tohmatsu  is  an  organization 
of  member  firms  devoted  to  excellence  in 
providing  professional  services  and  advice. 
We  are  focused  on  client  service  through  a 
global  strategy  executed  locally  in  nearly  1 50 
countries.  With  access  to  the  deep  intellectu¬ 
al  capital  of  1 20,000  people  worldwide,  our 


"It's  important  to  realize  that  these  char¬ 
acteristics  are  separate  but  strongly  inter¬ 
related,"  Goverman  says.  An  organization 
that  delivers  effectively  will  be  more  credi¬ 
ble  in  setting  governance  direction.  And 
as  investment  decisions  are  turned  into 
real  business  benefit,  the  organization  will 
gain  new  insight  into  where  and  how  IT 
can  contribute  to  the  business. 

Conclusion 

IT  alignment  represents  a  strategic  oppor¬ 
tunity  for  businesses,  particularly  in  an 
improving  economy  where  seizing  an 
early  advantage  can  be  a  differentiator. 

By  modeling  these  three  characteristics  of 
executive  agreement  on  the  role  of  IT, 
agreeing  on  the  right  things  and  follow¬ 
ing  through  by  doing  the  right  things 
right,  companies  can  emerge  stronger 
and  more  focused. 

"The  marketplace  at  the  moment  isn't 
going  to  tolerate  inefficiency,"  says 
Horner.  "By  the  same  token,  the  market¬ 
place  stands  ready  to  reward  true  strate¬ 
gic  alignment — and  the  companies  that 
achieve  it."  • 


For  more  information  about  this 
report  and/or  Deloitte  Consulting's 
CIO  Services  practice,  visit 

www.  deloitte.  com/us/C  lOservices 


member  firms,  including  their  affiliates,  deliv¬ 
er  services  in  four  professional  areas:  audit, 
tax,  consulting,  and  financial  advisory  servic¬ 
es.  Our  member  firms  serve  more  than  one- 
half  of  the  world's  largest  companies,  as  well 
as  large  national  enterprises,  public  institu¬ 
tions,  locally  important  clients,  and  success¬ 
ful,  fast-growing  global  growth  companies. 

Deloitte  Touche  Tohmatsu  is  a  Swiss  Verein 
(association),  and,  as  such,  neither  Deloitte 
Touche  Tohmatsu  nor  any  of  its  member 
firms  has  any  liability  for  each  other's  acts  or 
omissions.  Each  of  the  member  firms  is  a  sep¬ 
arate  and  independent  legal  entity  operating 
under  the  names  "Deloitte,"  "Deloitte  & 
Touche,"  "Deloitte  Touche  Tohmatsu,"  or 
other,  related  names.  The  services  described 
herein  are  provided  by  the  member  firms  and 
not  by  the  Deloitte  Touche  Tohmatsu  Verein. 
For  regulatory  and  other  reasons,  certain 
member  firms  do  not  provide  services  in  all 
four  professional  areas  listed  above. 
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IS  YOUR  BOSS 


YOU  NEED  TO  GET  SMART  FAST. 


How  can  you  clearly  demonstrate  the  business  value  of 
your  information  technology  projects?  And  what  things 
should  you  measure  to  demonstrate  that  value?  Turn  to  the 
CIO  FOCUS™  on  I.T.  VALUE:  MEASUREMENT  TOOLS  AND 
TECHNIQUES  THAT  WORK— actionable  information  created, 
filtered  and  packaged  by  the  award-winning  editors  of 
CIO  magazine. 

CIO  FOCUS™  is  delivered  right  to  your  desktop  giving  you 
immediate  access  to  the  information  you  need.  And  for  your 
future  reference  needs,  the  electronic  file  is  followed  by  a 
packaged  version,  shipped  within  72  hours. 


CIO  FOCUS™ 

The  Balanced  Scorecard 

Applied  Wireless:  Making 
Wireless  Work  in  Business 

The  Elite  CIO:  Going  Beyond 
the  Basics 

Strategic  Maneuvers: 

How  to  Plan,  Align  and 
Govern  IT  Strategy 


CIO  FOCUS™ 

STRATEGIC  GUIDES  FOR  EXECUTIVE  DECISION  MAKING 


The  Resource 
for  Information 
Executives 


EXECUTIVE  DECISION-SUPPORT  TOOLS,  VISIT  THE  CIO  STORE— THE  CIO’S  KNOWLEDGE  MARKETPLACE. 

www.TheCIOStore.com 


CIO  Perspectives  Conference 

April  18  -  20, 2004  La  Costa  Resort  &  Spa  Carlsbad,  California 

Spend  a  few  thought-provoking  and  enlightening  days  with  your  CIO  peers. 

Building  the 

21st  Century 

Organization 

Mastering  the  Politics,  Policies  and  Technologies 


The  high-performance,  technology-enabled, 
global,  seamless  and  secure  organization: 
that’s  the  goal  of  every  CIO.  Over  the  past  few 
years,  hardware  and  network/telecom  costs  have  lowered 
significantly,  and  the  enterprise  software  industry  contin¬ 
ues  to  mature.  We’ve  spent  considerable  time  and  money 
re-engineering  and  streamlining  business  processes, 
“right-sizing”  our  staff  and  organizations,  leveraging  our 
customer  information  and  analyzing  our  vulnerabilities. 
But  we’re  still  not  there.  We  haven’t  won  the  IT  value 
argument  with  management,  and  our  users  continue  to 
give  us  low  marks.  So,  what’s  holding  us  back?  We’ll 
examine  the  roadblocks  that  internal  and  external  poli¬ 
tics,  policies  and  technologies  are  throwing  at  us,  and 
learn  what  actions  we  can  take— individually  and  collec¬ 
tively— to  overcome  them. 

Concurrent  CSO  Conference: 

Bring  Your  CSO 

Our  CSO  (Chief  Security  Officer)  Conference,  How  to  Take  the  Sting 
Out  of  Risk,  is  being  held  concurrently  at  the  La  Costa  Resort  &  Spa. 
If  you  and  your  CSO  or  CISO  wish  to  attend  the  respective  CIO  and 
CSO  conferences— you’ll  get  a  significant  package  discount. 

Call  us  at  800.366.0246  for  special  pricing  and  have  your  chief 
security  executive  check  out  the  CSO  conference  information 
www.csoonline.com/perspectives. 


Powerful  Insights 
Actionable  Ideas 
Great  Networking 


Call  800.366.0246  or  visit 
www.cio.com/conferences 


Sponsored  by 


invent 


OUOVA 


The  Value  of  Trust 


Presented  by 


The  Resource  for 
Information  Executives 


NEW  SPEAKERS  ADDED: 


John  M.  Poindexter 

PhD,  Consultant  &  Former  Director  of  the  Informa¬ 
tion  Awareness  Office  at  DARPA,  on  “Security  With 
Privacy,"  giving  us  a  special  “After  Action  Report  on 
Total  Information  Awareness”  and  discussing  why 
the  issues  involved  are  important  for  business. 


Ira  Winkler 

Industry  Expert  &  Author  of  Spies  Among  Us,  on 
"Lessons  from  Super  Spies,"  drawing  from  studies 
of  actual  espionage  cases,  including  the  theft  of 
nuclear  designs,  to  show  how  you  can  take  a  realistic 
and  cost-effective  approach  to  securing  your  own 
organization. 


SPEAKERS 

James  E.  Albert 


Chief  Information 
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Technology  Officer, 

San  Francisco  Municipal 
Transportation  Agency 


Thomas  Malone 


Author  of  The  Future  of 
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Business  Continuity, 
USAA  Information 
Technology  Company 
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The  Wharton  School 


Mamie  Millard 


Senior  Vice  President, 
Product  Development 
&  Delivery, 
Travelocity.com 

Senior  Vice  President, 
Corporate  Governance, 
Tyco  International 


Chief  Security  Officer 
(retired),  Fidelity  Invest¬ 
ments  &  Past  President, 
International  Security 
Management  Association 

Senior  Vice  President  & 
CIO,  Tyco  International 


CTO,  DuPont 


,  General  Motors 


Vice  President,  Strategic 
Sourcing,  Scotiabank 


Vice  President  &  CIO, 
Farmers  Insurance 


Vice  President  &  CIO, 
Tokyo  Electron  America 


BBS 

Editor  in  Chief, 

CIO  Magazine 


Vice  President  Informa¬ 
tion  Services,  Northeast¬ 
ern  University 

Senior  Vice  President 
&  CIO,  Mattress 
Giant  Corp. 
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President  &  CIO,  USAA 
Information  Technology 
Company 


Globalization  touches  all 
.  organizations.  What  do  your 
policies  say  about  your  politics? 


A  case  study  with  two  members  of  the 
new  senior  management  team  at  Tyco 
who  are  rebuilding  and  refocusing  the 
company. 


How  can  your  organization’s 
structure  help  ensure  the  safety  of 
your  electronic  and  physical  assets? 


A  run  of  nasty  viruses  and  a  major 
power  blackout  provide  several 
lessons  we  can  take  to  heart. 


s  it  time  for  the  US  to  craft  a  formal,  i 
national  technology  policy  in  order  to 
remain  competitive  in  the  globalized 
economy  of  the  21st  century? 


Research  findings  and  best  practices 
on  everything  from  finance  to  staffing 
to  marketing/communications. 


What  are  the  high  stakes  battles 
and  how  will  the  outcome  shape 
products  and  services? 


The  complaints  about  the  overall  lack  of 
quality  of  major  commercial  software 
are  endless.  What  can  and  is  being  done 
to  make  it  better? 


For  More  1 

:  Technology 

Information  1 

;  Fear  Factor 

Are  we  stifling  innovative  products  and 
services  because  CIOs  are  afraid  to  buy 
from  small  firms  and  start-ups? 


Call  800.366.0246  or  visit 
www.cio.com/conferences. 

To  be  eligible  for  CIO  Perspectives  Conference 
attendance,  you  must  be  a  CIO  or  executive-level 
IT  practitioner  or  a  participating  corporate  sponsor. 


Many  enterprise  applications  turn  into 
major  disappointments,  if  not  disasters. 
Were  they  over-hyped?  Were  our 
expectations  unrealistic?  What 
separates  winners  from  losers? 
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THE  COMMUNITY  HAS  BEEN 
JAWING  ABOUT... 


Project  prioritization: 

More  projects  +  tight  budgets : 
big  headaches 

Innovation: 

How  do  you  cultivate  it? 

Offshore  outsourcing: 

Getting  hotter  by  the  minute 

ERP  in  China: 

Major  issues— from  culture  to 
connectivity 


YESTERDAY’S  NEWS: 


Corporate  malfeasance: 

Let's  move  on 


Our  online  community  of  IT  executive 
members  meets  often  to  trade  tips, 
tactics  and  best  practices.  To  learn 
more,  contact  Martha  Heller  at 

mheller@cio.com. 


Six  Smart  Strategies  for 
Handling  the  Help  Desk 

Members  of  the  Best  Practice  Exchange  offer  ways  to  make  the 
most  of  your  understaffed  help  desk 


WE  RECENTLY  POSED  THIS  RIDDLE  to  the  Best  Practice  Exchange:  Your  help  desk  is  staffed  by  pro¬ 
ductive  workers.  You  expect  your  call  volume  to  increase  because  of  a  new  system  implementa¬ 
tion  that  affects  a  good  chunk  of  your  user  base.  But  your  budget  doesn’t  allow  for  additional 
headcount.  What  do  you  do?  Our  members  agree  that  while  the  conundrum  is  hardly  an  envi¬ 
able  one,  it  isn’t  the  end  of  the  world.  In  fact,  they  offered  smart  ways  to  get  out  of  the  bind. 


1USER,  HELP  THYSELF.  “Put  together  a 
sample  group  of  affected  users,  help  desk 
technicians  and  project  team  members  to 
brainstorm  a  sizable  list  of  FAQs,  and  post 
the  results  on  the  help  desk  website  as  part 
of  the  launch  communication,”  suggests 
Robert  Urwiler,  CIO  of  Macromedia.  “And 
strongly  encourage  the  use  of  online  knowl¬ 
edge  bases  and  self-service  ticket  manage¬ 
ment  capabilities.” 

KEEP  IT  SIMPLE.  “Make  sure  your  online 
knowledge  base  is  simple  and  easy  to  use 
by  focusing  on  the  1 0  percent  of  problems  that 
account  for  40  percent  of  the  calls,”  says  Hank 
Zupnick,  CIO  of  GE  Real  Estate.  “A  too  com¬ 
plex  online  knowledge  base  just  brings  users 
back  to  the  telephone  hotline.” 


WORK  THOSE  METRICS.  “Make  sure 
you’ve  got  very  clear  metrics  around  aver¬ 
age  handle  time  and  average  speed-to-answer, 
and  train  your  team  to  use  these  metrics  effec¬ 
tively,”  advises  Bill  Wray,  CIO  of  Citizens 
Financial  Group.  “You’ll  get  more  calls 
handled  by  the  same  number  of  people,  even 
those  you  already  assumed  were  productive.  ” 
GO  INTO  TRIAGE  MODE.  Ensure  ahead 
of  time  that  your  help  desk  reps  can  rec¬ 
ognize  the  difference  between  a  low-priority 
and  high-priority  issue,  and  deal  with  the  for¬ 
mer  quickly  by  opening  a  ticket  and  getting  off 
the  phone,  says  Urwiler.  “Too  many  times, 
help  desk  techs  do  not  discriminate  the  way 
they  should  during  spikes,  and  the  truly  needy 
wind  up  waiting  in  queue  excessively.” 
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COMPANIES  THAT  WERE 
JUST  IDEAS  YESTERDAY 
RUN  SAP 


What  if  you’re  onto  something  big,  but  aren’t  big  yet?  Start  with  SAPS  solutions  for  small  and  midsize  companies. 
Solutions  designed  to  fit  any  size  business  —  and  any  size  budget.  And  because  they’re  built  with  expansion  in 
mind,  they  won’t  just  help  you  grow,  they  will  grow  with  you.  Visit  sap.com/ideas  or  call  800  880  1727,  because 
we  have  a  few  big  ideas  of  our  own. 


©2004  SAP  AG.  SAP  and  the  SAP  logo  are  trademarks  and  registered  trademarks  of  SAP  AG  in  Germany  and  several  other  countries. 


theExchange 


BRING  ON  THE  SUPERUSERS.  Enlist 
some  great  business  users  early  on  in  the 
project,  and  train  them  alongside  the  help 
desk,  suggests  James  Emanuelson,  VP  and 
CIO  of  Land  O’Lakes  Farmland  Feed.  “They 
can  help  with  the  surge  of  calls  for  weeks  after 
implementations  at  their  respective  sites,”  he 
says.  “Not  only  will  this  help  you  deal  with 
the  call  surge,  but  it  can  also  build  a  team 
environment  between  IS  and  the  business  at 
another  level  in  the  organization.” 

SHOW  YOUR  SUPPORT.  Good  morale 
boosts  help-desk  productivity.  “We 


never  spend  enough  time  with  our  teams, 
and  this  is  the  perfect  opportunity  for  the 
CIO  to  spend  some  quality  time  in  the  area, 
showing  his  support  for  the  help  desk,  ”  sug¬ 
gests  Roger  Coville,  CIO  of  Abercrombie  & 
Fitch.  “Or  have  the  VP  from  the  supported 
business  area  come  by  and  talk  about  how 
important  the  help  desk  is  to  her  success. 
Most  people  leave  a  little  in  the  tank  each 
day,  but  help  desk  crunch  time  is  when  the 
staff  needs  to  go  home  on  empty.”  Showing 
how  much  you  value  your  team  will  go  a 
long  way. 


On  streamlining  your  RFP  process: 

“We  use  a  format  we  call  RFP-EZ,  like  the  1040  short  form. 

It  is  designed  to  be  brief,  with  check-box  questions  versus  the 
traditional  300  pages  of  open-ended  questions.  RFP-EZ  is 
quick  to  build,  less  time-consuming  for  vendors  and  easy  for  us 
to  evaluate.  Vendors  have  been  very  complimentary  about  the 
RFP-EZ  approach.” 

-GALEN  METZ.  CHIEFTECHN0L0GY  ARCHITECT, 
AMERICAN  MEDICAL  SECURITY  GROUP 


On  negotiating  vendor  contracts; 

“Put  named  resources  into  your  vendor  contracts.  If  there  are 
specific  people  from  a  vendor  organization  you  want  on  your 
project,  make  a  contractual  agreement  that  they  will  be  doing 
the  work.  A  vendor  could  bring  their  stars  only  for  the  sale,  but 
you  want  them  to  stay  and  help  deliver  the  project.” 

-HANK  ZUPNICK,  CIO.  GE  REAL  ESTATE 


On  project  management  offices  (PMOs): 

“Rather  than  create  a  PMO,  CIOs  should  consider  placingthe 
project  management  responsibilities  inside  the  functional 
groups  in  IT.  The  concept  is  similar  to  what  some  manufactur¬ 
ers  used  to  do  with  quality  initiatives:  A  separate  quality 
department  would  do  inspections  and  write  policies.  Then 
most  realized  it  was  important  to  build  project  management 
into  the  process  itself,  instead  of  focusing  on  it  as  a  separate 
discipline.  Do  the  same  with  project  management— build  it  into 
your  organization  and  processes.  In  other  words,  institutional¬ 
ize  it,  and  eliminate  the  overhead  in  the  process.” 

-LEE  LICHLYTER.  CIO.  BUTLER  MANUFACTURING 


PEERCOUNSEL 

Vendors  ^ 

Can  anyone  tell  me  your  view 
on  the  benefit  of  going  with  a 
tier-two  ERP  vendor  rather 
than  the  usual  tier-one  sus¬ 
pects? 

-CTO,  INSURANCE  COMPANY 

A:  Any  ERP  package  you 
choose  is  going  to  do  accounts 
payable,  accounts  receivable 
and  all  of  the  other  basic  busi¬ 
ness  processes.  I  am  at  a  midsize 
company  that  considered  going 
with  a  tier  one,  but  in  the  end  we 
went  with  a  tier  two  for  a  variety  of 
reasons. 

First,  on  implementation  and 
maintenance,  our  tier  two  is  a  frac¬ 
tion  of  the  cost  of  the  tier  ones  we 
considered.  Second,  while  the  tier 
ones  are  customizable  for  specific 
industries,  that  customization  is 
expensive.  With  ERP,  you  always 
have  to  do  some  business- 
processes  reengineering  software 
modification,  and  out  of  the  box, 
our  tier-two  package  fit  reasonably 
well  with  our  business.  Finally,  we 
got  the  feeling  that  the  tier  ones 
didn't  value  our  midmarket  busi¬ 
ness  to  the  same  degree  as  the  tier 
twos.  We  like  the  support  we  get 
from  them. 

The  big  question  with  a  tier  two, 
of  course,  is  how  long  they  can 
compete  with  the  tier  ones.  You 
need  them  to  stick  around.  But  in 
the  end,  it  doesn’t  matter  which 
ERP  package  you  go  with  if  you 
don’t  let  the  business  lead  the 
reengineering  effort.  The  success  or 
failure  of  ERP  rides  on  the  imple¬ 
mentation,  not  on  the 
software. 

-STEVE  HOLT.  CIO. 
ACCURIDE 
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ODDS  ARE  YOUR  ANTIVIRUS, 
ANTI-SPAM,  AND  CONTENT  FILTERING 
ARE  NOT  INTEGRATED  AT  THE  GATEWAY. 


Beat  the  odds  with  Trend  Micro. 

Spam,  viruses,  and  malicious  behavior  can  all  threaten  your 
security.  That's  why  Trend  Micro,  the  global  leader*  at  the  gateway, 
created  InterScan™  Messaging  Security  Suite  5.5 —  a  cost-effective 
integrated  messaging  security  platform  that  combines  antivirus, 
content  filtering,  and  anti-Spam  applications  in  one 
easy-to-manage,  scalable  solution. 

For  a  free  evaluation,  call  1.888. 58. TREND 
or  go  to  www.trendmicro.com 
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Patricia  Wallington  I  Total  Leadership 


Don't  letthe  work  kill  the  wonder 


JOY  COMES  NATURALLY  to  everyone  at  first.  I  remember  the  excla¬ 
mation  from  a  5-year-old — “That  was  the  most  fun  I  ever 
had!” — after  a  visit  to  an  amusement  park,  the  joy  so  evident 
in  his  glowing  face.  A  slightly  more  jaded  16-year-old’s  cool 
statement  that  “This  is  the  best  present  ever”  on  receiving  his 
first  car  couldn’t  mask  the  excitement  he  felt.  Do  we  lose  the 
childhood  art  of  experiencing  joy  by  the  time  we  are  eligible  for 
leadership  positions? 

I  am  always  surprised  when  people  refuse  to  consider  tak¬ 
ing  on  leadership  positions.  “Too  hard,”  they  say.  “Too  many 
conflicts,  people  issues,  meetings,  bureaucracy,  hours.”  Do  we 
focus  so  much  on  the  challenges  that  we  miss  the  real  joy  that 
can  be  experienced  in  leadership?  I  love  the  whole  subject  of 
leadership  and  have  truly  felt  joy  in  each  of  the  leadership  posi¬ 
tions  I  have  held. 

I  am  not  suggesting  that  everyone  should  aspire  to  leadership 
or  would  find  the  same  joy  in  it,  but  surely  the  perceived  neg¬ 
atives  are  overwhelming  the  positive  aspects  for  some  people. 
Let  me  share  some  of  the  aspects  of  leadership  that  I  have 
found  particularly  rewarding. 


Impact 

Leadership  is  both  a  reward  and  a  responsibility.  Your  role 
calls  for  decisions  and  actions  that  have  a  powerful  impact  on 
the  people  around  you.  Your  influence  on  the  careers  of  those 
in  your  organization  can  facilitate  the  achievement  of  their 
long-held  goals.  Your  coaching  and  developmental  actions  are 
rewarded  when  you  see  an  employee  shine  in  a  new  situation. 
Those  who  depend  on  your  leadership  may  see  you  as  a  role 
model.  The  words  and  actions  you  choose  will  influence  out¬ 
comes  you  may  never  see  or  hear. 

Occasionally,  you  meet  someone  or  hear  a  story  that  brings 
joy  to  the  surface.  I  once  gave  a  speech  to  a  group  of  women 
in  my  hometown.  Years  later,  one  of  the  women  called  me  to 
tell  me  that  speech  had  changed  her  life!  She  had  completely 
changed  career  directions,  was  successful  and,  most  of  all,  was 
happy.  I  felt  the  joy  of  that  5-year-old  on  hearing  this. 
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CAN  YOUR  SOFTWARE  TELL  YOU  WHICH  ONE? 


And  protect  the  delivery  of  vital  business  services 
like  sales,  customer  service,  online  transactions, 
logistics  and  distribution — whatever  is  most 
critical  to  your  company's  success.  It's  enterprise 
management  software  that  works  with  your  existing 
IT  resources  to  let  you  manage  what  matters  from 
a  business  perspective  and  execute  with  precision. 
Find  out  how  at  www.bmc.com/bsm47 


Business  Service  Management  solutions  from 
BMC  Software®  can.  In  fact,  they  let  you  predict 
critical  performance  problems  and  resolve  them 
before  they  ever  impact  your  business.  And  you 
can  prioritize  IT  management,  investments  and 
resource  allocations  to  optimize  your  business 
performance.  So  you  can  solidly  align  your  IT 
investments  with  strategic  business  goals. 
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Patricia  Wallington  I  Total  Leadership 


The  ability  to  affect  the  success  of  your  company  is  great. 
Understanding  the  company  objectives  and  how  your  actions 
affect  the  results  is  key  to  making  a  strong  contribution. 
Sometimes  it  may  seem  that  the  objectives  are  far  removed 
from  your  day-to-day  efforts,  but  even  the  most  mundane 
task  eventually  finds  itself  reflected  in  the  company  results. 
How  you  manage  your  budget,  achieve  diversity  goals,  add  to 


the  bench  strength  of  the  company  through  recruitment  and 
development  of  employees,  set  and  meet  productivity  goals, 
and  act  as  a  visible,  professional  representative  of  the  com¬ 
pany  in  external  activities — these  are  all  ways  to  positively 
impact  the  company. 

In  one  company  I  worked  for,  one  of  the  primary  goals  was 
return  on  assets  (ROA).  My  team  was  able  to  structure  a  finan¬ 
cial  transaction  on  our  computer  assets  that  increased  the  com¬ 
pany  ROA  by  0.25  percent.  Initially,  we  thought  this  was  a 
trivial  contribution  until  the  chairman  singled  it  out  as  a  unique 
contribution  for  a  “technical”  group.  How  proud  we  were  of 
that  achievement! 

Don’t  ignore  the  positive  impact  that  leadership  can  have 
on  you  personally.  Your  ability  to  achieve  your  own  goals 
strengthens  as  you  build  confidence  through  success.  Even  the 
occasional  failures  should  not  detract  from  your  confidence. 
Enjoy  the  successes  and  learn  from  the  failures. 

Freedom 

Every  leader  has  a  sphere  of  influence.  Within  that  sphere  of 
influence,  you  have  tremendous  freedom.  You  set  the  tone  for 
your  organization.  Sure,  you  have  to  live  within  corporate 
bounds,  but  that  still  leaves  lots  of  room  for  innovation.  For  all 
the  times  you  said,  “If  I  were  in  charge...”  you  are  now  in  a 
position  to  implement  your  ideas.  Enjoy  it! 

Take  freedom  a  step  further  and  extend  it  to  your  organiza¬ 
tion.  Free  staffers  from  the  “givens”  that  impede  their  creativ¬ 
ity.  Watch  the  organization  bloom  under  fewer  restrictions. 

How  many  times  have  we  all  heard,  “We  don’t  do  that 
here”?  Should  that  stop  you?  My  response  has  always  been,  “I 
am  here,  and  I  am  doing  that,  so  we  do  do  that  here.”  Some¬ 
times  it  takes  courage,  daring  and  spirit  to  break  through  the 
miasma  of  corporate  culture.  You  are  free  to  set  the  tone. 


Learning 

Effective  leadership  requires  the  ability  and  desire  for  continu¬ 
ous  learning.  Leadership  is  a  wonderful  classroom  for  the  study 
of  people  and  their  motivations.  Helping  your  staffers  demon¬ 
strate  appropriate  behavior — working  as  a  team  rather  than 
at  odds  with  one  another — will  lead  to  their  success  and  yours. 
It’s  a  delightful  feeling  when  your  efforts  reduce  dysfunctional 

actions.  Enjoy  your  growing 
understanding  of  what  it  takes 
to  motivate  the  individuals  in 
your  group. 

You  may  feel  challenged  to 
find  joy  when  you  are  making 
the  tough  decisions  so  preva¬ 
lent  in  today’s  business  world. 
But  tough  decisions  build  char¬ 
acter.  Learning  to  make  them 
with  the  right  perspective  will  help.  Have  empathy  for  those 
impacted,  and  realize  this  is  just  a  business  decision — not  life- 
or-death  decision  making.  Respect  what  you  have  learned. 
Feel  the  satisfaction  of  having  completed  a  difficult  task,  if 
nothing  else. 

Life 

The  joy  of  leadership  can  extend  to  your  personal  life.  The 
daily  grind  of  business  can  be  debilitating  to  the  spirit  even  in 
the  best  of  times.  Taking  that  home  will  only  spread  the  pain. 
Learn  to  use  the  end-of-day  commute  to  recalibrate  your  per¬ 
spective  and  return  home  in  good  spirits.  There  are  so  many 
things  to  be  thankful  for  in  our  lives  that  we  tend  to  take  them 
for  granted.  Take  the  time  to  enjoy  the  relationships,  the  mate¬ 
rial  blessings,  the  opportunities  we  have  for  recreation  and  the 
life  skills  we  have  attained.  Sure,  there  are  challenges  in  every¬ 
one’s  life — some  of  them  quite  significant.  But  joy  can  be  found 
in  even  the  most  difficult  lives.  Look  for  it! 

I’ve  always  been  fond  of  Henry  Ford’s  aphorism,  “Obsta¬ 
cles  are  those  frightful  things  we  see  when  we  take  our  eyes 
off  our  goal.”  Yet  sometimes  we  become  so  focused  on  the 
objective  that  we  lose  sight  of  the  joyous  things  in  life.  There 
is  really  only  one  obstacle  to  finding  joy  in  leadership:  our¬ 
selves.  Joy  is  always  there,  but  we  may  have  blinded  our¬ 
selves  to  it  or  not  let  ourselves  pursue  it.  This  should  be  a 
relatively  easy  obstacle  to  remove.  Find  that  5-year-old  in 
yourself  and  experience  unfettered  enjoyment  of  even  the  sim¬ 
plest  things.  0E3 


Send  your  thoughts  on  this  column  to  leadership@cio.com. 
Before  retiring  in  1999,  Patricia  Wallington  was  corpo¬ 
rate  vice  president  and  CIO  at  Xerox.  She  is  now  presi¬ 
dent  of  CIO  Associates  in  Sarasota,  Fla. 


Sometimes  we  become  so  focused  on  the  objective  that 
we  lose  sight  of  the  joyous  things  in  life.  There  is  really 
only  one  obstacle  to  finding  joy  in  leadership:  ourselves. 
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WITH  558, 183,741  PASSENGERS 
A  YEAR  RELYING  ON  AIRPORTS 

FOR  THEIR  SECURITY 
WHO  CAN  AIRPORTS  RELY  ON? 


With  30  years  of  research  and  development  in  security  technology  like  biometric  identification,  we  are  ready  to  empower  the 
nation’s  airports  with  security  innovations  now  when  they  need  them  most.  Our  understanding  of  imaging  and  software  combined 
with  our  experience  designing  large-scale,  open  systems  like  IT  infrastructures,  network  communications  and  enterprise 
computing  provides  us  with  the  knowledge  and  resources  to  help  manage  this  complex  task  efficiently.  Which  is  good  news  for 
busy  passengers  and  another  example  of  NEC  empowering  people  through  innovation,  www.necus.com  800-338-9549 

IT  SERVICES  AND  SOFTWARE  ENTERPRISE  NETWORKING  AND  COMPUTING  SEMICONDUCTORS  IMAGING  AND  DISPLAYS 
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Empowered  by  Innovation 


Microsoft 

Your  potential.  Our  passion .™ 


SIEMENS 


Name 


Mr.  417,000  People, 
130  Business  Units 
in  190  Countries, 

All  Managed  in 
One  Artivp  Directory 


"With  130  different  business  units,  we're  like 
the  ultimate  manageability  case  study." 

John  Min  nick 

Manager,  Technology  Development,  Siemens 


Microsoft® 

Windows 
Server  System 
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Make  a  name  for  yourself  with  Windows  Server  System, 

Microsoft  Windows  Server  System  makes  Siemens' 
infrastructure  easier  to  manage.  Here's  how:  using 
Windows  Server  2003  with  Active  Directory  and 
Exchange  Server  2003,  Siemens  built  a  single 
directory  with  over  400,000  identities  worldwide 
across  130  business  units.  This  allows  them  to 
manage  identities  at  both  a  global  and  local  level. 
It's  software  that  helps  you  do  more  with  less.  Get 
the  full  Siemens  story  and  a  hands-on  management 
tool  at  microsoft.com/wssystem 


Windows  Server  System"  includes  these  products: 

Server  OS  Windows  Server’" 

Operations  Infrastructure  Systems  Management  Server 

Application  Center 
Operations  Manager 
Internet  Security  &  Acceleration  Server 
Windows®  Storage  Server 
Application  Infrastructure  SQL  Server™ 

BizTalk®  Server 
Commerce  Server 
Content  Management  Server 
Host  Integration  Server 

Information  Work  Infrastructure  Exchange  Server 

Office  SharePoint™  Portal  Server 
Office  Live  Communications  Server 


Michael  Schrage  I  Making  IT  Work 


It's  All  About  the  Execution 


Now  You  See  It, 
Now  You  Don’t 

In  a  world  in  which  partners  are  privy  to  each  other’s 
data,  the  challenge  will  be  how  to  collaborate 
without  sacrificing  competitive  advantage 

TECHNO-ENTHUSIASTS  INSIST  that  radio  frequency  identification  is 
the  Next  Great  Killer  App  and  will  transform  the  future  of  the 
global  supply  chain.  But  I’ve  seen  the  future  of  supply  chain 
management,  and  it’s  called  China.  If  I  were  advising  a  CIO 
charged  with  a  global  supply  chain  mandate,  I’d  suggest  they’d 
get  a  better  return  on  their  time  looking  at  supply  chain  behav¬ 
ior  in  China  than  at  prospective  RFID  implementations  by 
Wal-Mart. 

A  story  in  the  China  Daily  English-language  paper  describes 
local  law  enforcement  officials  confiscating  tens  of  thousands 
of  cartons  of  counterfeit  cigarettes  that  had  genuine  Universal 
Product  Code  labels.  Step  outside  a  luxury  hotel  in  the  heart  of 
Beijing’s  embassy  district  in  January  and  you’ll  find  street  vendors 
approaching  you  with  shrink-wrapped  DVDs  of  The  Return  of 
the  King  and  The  Last  Samurai.  They’re  pirated,  of  course. 

Not  to  worry:  This  isn’t  a  column  about  counterfeiting  or 
intellectual  property  theft  in  China.  That  would  be  too  easy. 
More  important,  it  would  miss  the  point.  Sure,  there  are  “bad 
actors”  in  China  who  use  their  vital  link  in  the  supply  chain  to 
steal,  cheat  and  copy  from  their  clients,  but  that  masks  the  deeper 


dynamics  of  tomorrow’s  interactions.  Talk  to  the  CIOs  of  Chinese 
companies  supplying  U.S.  and  European  multinationals  with  IT 
systems  and  components,  and  you’ll  hear  that  they’re  happy  to 
comply  with  whatever  technical  standards  their  customer  desires. 

ERP?  A-OK.  Interconnected  CAD?  Of  course.  They’re  very 
eager  to  learn.  Yes,  they  want  to  be  the  low-cost  supplier.  But, 
if  you  don’t  mind,  they  fully  expect  to  evolve  into  strategic 
partners.  The  IT  systems  they’re  building  to  provide  just-in- 
time  componentry  worldwide  are  supposed  to  become  plat¬ 
forms  for  value-added  subassemblies  by  decade’s  end.  Today, 
it’s  chips;  tomorrow,  it’s  motherboards;  next  year,  it’s  an  effort 
that  makes  Apple’s  iPod  or  Sony’s  Clie  look  like  yesterday’s 
PC.  In  other  words,  Chinese  companies  have  ambitions  that  go 
beyond  the  first  few  links  of  your  supply  chain. 

In  this  respect,  RFID  represents  the  least  interesting  inno¬ 
vation  in  the  supply  chain  future.  After  all,  none  of  Wal-Mart ’s 
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Today’s  threats  require  a  lot  more  than  a  firewall. 
This  is  a  lot  more  than  a  firewall. 
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Introducing  the  Symantec™  Gateway  Security  5400  Series.  It  wasn’t  long  ago  that 
a  firewall  provided  all  the  perimeter  protection  an  enterprise  needed.  But  that  was 
before  blended  threats  like  Slammer  and  Blaster.  Now  there’s  the  Symantec  Gateway 
Security  5400  Series,  full  inspection  firewall  appliances  that  integrate  intrusion 
prevention  and  intrusion  detection,  virus  protection,  content  filtering,  anti-spam  and 
VPN.  The  result  is  a  better  defense  against  complex  attacks  and,  thanks  to  centralized 
management  capabilities,  greater  control  over  your  organization’s  perimeter  security. 
To  learn  more  or  to  receive  our  free  multimedia  CD,  “Symantec  Gateway  Security  5400 
Series,”  visit  http://ses.symantec.com/SGS5400  or  call  800  745  6054. 
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suppliers,  for  example,  will  ever  go  into  direct  competition 
with  the  world’s  largest  store.  To  the  contrary,  Wal-Mart  seems 
far  likelier  to  go  into  direct  competition  with  some  of  its  largest 
suppliers  via  its  own  house  or  private  label  brands.  Managing 
the  competition  between  global  supply  chains  may  prove  much 
less  of  a  leadership  challenge  to  CIOs  than  managing  the  com¬ 
petition  within  global  supply  chains. 

To  what  extent  might  RFID  be  a  virtual  window  into  the 
cost  structures  and  innovation  processes  of  a  company’s  sup¬ 
plier?  More  provocatively,  to  what  extent  might  suppliers 
mask,  distort  or  minimize  RFID  tag  elements  to  minimize  the 
risk  of  giving  their  customers  information  that  might  come 
back  to  bite  them  in  future  negotiations? 

Answers  to  those  questions  will  define  the  CIO’s  supply 
chain  design  and  implementation  agenda  for  the  next  decade. 
The  “cost-effective”  supply  chain  is  a  seductive  trap.  CIOs 
who  invest  as  if  the  goal  of  their  supply  chain  infrastructures  is 


Determining  how  much  information  you  reveal 
to  or  conceal  from  supply  chain  partners  may 
end  up  being  the  CIO’s  most  difficult  task. 


to  ensure  least-cost  design  and  delivery  of  just-in-time  ingredi¬ 
ents  are  either  shortsighted  fools  or  long-term  incompetents. 
China’s  rise  as  a  global  sourcing  superpower  requires  CIOs  to 
fundamentally  rethink  what  kind  of  transparency,  visibility  and 
accountability  they  want  to  build  into  their  supply  chain. 

Why?  Because  it’s  far  too  easy  to  design  supply  chains  that 
get  the  immediate  job  done  at  the  price  of  irreparably  altering 
the  balance  of  power  between  the  multinational  customer  and 
Chinese  vendor.  George  Bernard  Shaw  once  defined  success  as 
the  ability  to  take  the  path  of  maximum  advantage  rather  than 
the  path  of  least  resistance.  By  that  measure,  too  many  global 
supply  chains  are  miserable  failures. 

How  so?  Listen  and  learn  from  the  Chinese.  Companies 
will  increasingly  have  to  decide  what  information  they  wish 
to  conceal  or  reveal  to  their  links  on  their  supply  chains. 

Determining  the  appropriate 
conceal/reveal  ratio  is  a  calculation 
that,  frankly,  is  more  difficult  than 
most  organizations  are  willing  to 
admit.  Legal,  manufacturing,  sales 
and  finance  may  each  have  different 
notions  of  what  data  is  appropri¬ 
ate — or  necessary — to  share.  If  your 
supplier  asks  for  financial  informa¬ 
tion,  sales  projections  or  manufac¬ 
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Michael  Schrage  says  CIOs  need  to 
beware  the  conceal/reveal  ratio 
and  the  collaborate/commoditize 
axis  as  they  are  the  key  business 
criteria  to  determine  technical 
investments.  What  do  you  think? 
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turing  batch  schedules  as  part  of  its  efforts  to  be  a  faster, 
cheaper  source  for  you,  just  how  accommodating  are  you  pre¬ 
pared  to  be?  Does  IT  provide  the  necessary  data  in  an  inte¬ 
grated  ERP  fashion?  On  an  as-needed  data  retrieval  basis  via 
the  Net?  Or  through  souped-up  XML  process  drivers? 

What  complicates  these  questions  even  further  is  the  inar- 
guable  reality  that  there  are  “gray  markets”  in  supply  chains. 
The  Chinese  understand  a  lot  about  gray  markets.  One  Chinese 
manufacturing  head  who  works  closely  with  his  IT  chief  tells 
me  that  his  company  builds  a  dynamic  database  for  each  of  its 
major  accounts  and  uses  it  to  make  a  business  case  for  tighter 
links  to  its  customers’  networks.  The  executive’s  goal  is  to 
become  a  design  partner — not  just  a  supplier — to  his  key  cus¬ 
tomers.  He  believes  the  best  way  to  do  that  is  to  go  deeper 
into  the  client  company.  He’s  not  alone. 

If  you’re  the  CIO  of  the  client  company,  how  does  this  info- 
intimacy  play?  Do  you  want  to  encourage  informal  interac¬ 
tions?  Or  does  the  prospect  of  having  your  supply 
chain  management  support  half  a  dozen  data- 
sharing  “gray  markets”  increase  your  level  of 
risk?  Do  you  just  say,  “That’s  not  my  responsi¬ 
bility.  I  just  make  sure  the  infrastructure  works?” 

Your  answers  around  the  conceal/reveal  ratio 
would  no  doubt  be  influenced  by  the  question  of 
whether  your  company  wants  to  collaborate  with 
your  customer — or  supplier.  Or  whether  your  customer  wants 
to  commoditize  your  company’s  product.  Collaboration  likely 
means  more  revealing;  commoditization  means  more  conceal¬ 
ing.  After  all,  you  don’t  want  to  give  your  customer  the  ingre¬ 
dients  that  turn  you  into  just  another  supplier.  But  if  you’re 
trying  to  commoditize  a  key  supplier’s  offering,  then  you’re 
looking  for  more  information  that  would  make  it  easier  for 
your  company  to  switch  suppliers. 

In  other  words,  what  role  should  IT  play  in  helping  reduce 
dependence  on  your  suppliers  while  increasing  the  dependence 
of  your  customers?  I  don’t  know  the  answer  to  that  question. 
But  I  do  know  that  every  single  manufacturer  I’ve  met  in  Bei¬ 
jing  thinks  along  those  dimensions.  RFID  tags  are  a  technical 
means  to  a  business  end.  The  conceal/reveal  ratio  and  the  col¬ 
laborate/commoditize  axis,  on  the  other  hand,  are  key  busi¬ 
ness  criteria  to  determine  technical  investments. 

Observing  the  evolution  of  this  debate  in  China — and 
learning  how  this  supply  chain  superpower  implements 
answers  to  those  questions — represents  the  best  way  for  you 
to  discuss  the  future  of  the  supply  chain  in 
your  own  company.  BE] 

Michael  Schrage  is  codirector  of  the  MIT  Media 
Lab’s  eMarkets  Initiative.  He  can  be  reached  at 
s  chrage@media.mit.edu. 
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EMC  INFORMATION  LIFECYCLE  MANAGEMENT  STRATEGIES: 


INFORMATION 
LIFECYCLE 
MANAGEMENT  IS: 

a  strategy  that  uses 
people,  processes  and 
technology  to  store  and 
tap  critical  business 
data  throughout  its 
lifespan  of  value. 


IN  THIS  EDITION: 

See  how  growing 
companies  are  facing 
the  challenges  of 
managing  data  using 
Information  Lifecycle 
Management. 


Managing  Information  for 
Growing  Companies 


WHEN  IT  COMES  TO  USING  tech¬ 
nology  to  manage  information  for 
competitive  advantage,  most  people 
tend  to  think  big.  They  think  of  Fedex 
or  UPS.  Or  they  think  of  Dell,  a  com¬ 
pany  known  for  using  technology 
intelligently  to  build  closer  relation¬ 
ships  with  customers,  as  well  as  creat¬ 
ing  operational  efficiencies. 

But  technology  is  also  vital  to  build¬ 
ing  productivity  and  boosting  revenue 
at  the  small  to  mid-sized  business. 
Technology  can  be  extraordinarily 
important,  helping  growing  companies 
boost  productivity  and  stretch 
resources  and  manpower.  Indeed, 
technology  can  be  of  more  help  to 
companies  with  smaller  storage  infra¬ 
structures,  enabling  them  to  grow 
products  and  revenue  streams  at  an 
extraordinary  clip. 

Nowhere  is  that  more  important 
than  when  it  comes  to  mining  corpo¬ 
rate  information  on  a  company-wide 
basis,  finding  vital  nuggets  of  corpo¬ 
rate  data  that  can  provide  valuable 
analytical  insights  or  new  product 
ideas.  The  reality,  according  to  Dave 


Ellard,  CIO  of  Hopkinton,  Mass.- 
based  EMC,  is  that  small  to  mid-sized 
companies  have  the  same  demands  as 
larger  companies.  “Their  information 
comes  in  just  as  fast.  They  have  the 
same  regulatory  demands  and  the 
same  protection  demands,”  he  says. 
“Data  at  growing  companies  is  just  as 
strategically  important;  it’s  just  not 
usually  as  large-scale.” 

Indeed,  as  new  business  applica¬ 
tions  provide  more  ways  to  extract  a 
competitive  advantage  in  the  market¬ 
place,  the  strategic  use  of  information 
is  increasingly  at  the  heart  of  many 
successful  business  models.  So  it 
makes  sense  that  being  able  to  easily 
create,  share  and  ensure  the  safety  of 
that  data  is  a  top  priority  for  IT/busi- 
ness  leaders  at  growing  companies. 

CHALLENGES  TO  INFORMATION 
MANAGEMENT  FOR  GROWING 
COMPANIES 

Although  the  notion  is  promising, 
there  are  obstacles  in  the  path  of  exec¬ 
utives  at  companies  that  want  to  truly 
harness  the  power  of  information: 
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“When  you 
talk  about 
Information 
Lifecycle 
Management 
strategically, 
it  can  sound 
like 

something 
for  the 
Fortune 
1,000  guys  to 
do.  But  you 
can  also 
think  of 
Information 
Lifecycle 
Management 
in  pragmatic, 
practical 
terms.” 

—  Mike  Fisch, 
director  of 
storage  and 
networking,  The 
Clipper  Group 


•  Information’s  relentless  growth  means 
that  companies  must  struggle  to  manage 
an  infrastructure  that  will  only  become 
more  complex.  For  example,  Mike  Sink, 
IT  operations  manager  at  Kichler 
Lighting,  a  decorative  lighting  company 
in  Independence,  Ohio,  says  his  company 
needed  to  find  a  way  to  curb  explosive 
data  growth.  “We  were  looking  at  4  per¬ 
cent  data  growth  each  month,”  he  says. 

•  Growing  companies  must  innovate  on  a 
shoestring.  IT  budgets  today  can  be  lean 
and  mean,  making  it  tough  for  the  CIO  to 
fund  every  strategic  project  that  crosses 
his  or  her  desk.  Moreover,  IS  staff  at 
companies  with  smaller  storage  infra¬ 
structures  tends  to  be  smaller.  “Mid-sized 
companies  have  the  basics — their  goal  is 
to  get  the  strategic  IT  stuff  that  the  big 
guys  have — but  they  don’t  have  the 
resources,”  explains  Rich  Medina,  an 
analyst  at  Doculabs,  a  technology  con¬ 
sulting  firm  in  Chicago. 

•  Planning  for  growth  takes  up  a  large 
amount  of  technical  resources.  Many 
companies  have  inadvertently  exacerbated 
the  problem  by  building  infrastructure  on 
a  piecemeal  basis  that 
depends  largely  on  the 
quick  deployment  of 
off-the-shelf  applica¬ 
tions.  While  this 
keeps  initial  spending 
low,  it  makes  it  more 
difficult  to  build  a 
unified  infrastructure 
in  the  long  run. 

“Behind  the  scenes,  a 
lot  of  IT  processes  get 
complicated,  and  a  large 
number  of  our  commer¬ 
cial  customers  are  strug¬ 
gling  with  a  fractured  application  environ¬ 
ment  that  further  strains  their  resources,” 
says  Mike  Binder,  Director  of  North 
American  Commercial  Operations  at  EMC. 

•  Technical  staff  wears  a  lot  of  hats. 
“Smaller  companies  are  going  to  have 
fewer  people  doing  more  things,”  says 
Mike  Fisch,  director  of  storage  and  net¬ 


working  at  The  Clipper  Group,  a 
research  company  in  Wellesley,  Mass. 
“They’re  going  to  have  broad-based 
expertise  and  will  need  tools  that  aren’t 
hard  to  operate  and  deploy  because  they 
can’t  afford  to  take  much  time  for  train¬ 
ing.  It  means  they  will  look  for  tactical 
solutions  that  ease  a  specific  pain  point.” 
•  Growing  companies  prefer  proven  tech¬ 
nology.  When  it  comes  to  new  technology, 
companies  with  smaller  storage  infra¬ 
structures  tend  to  wait  for  enterprise-level 
businesses  to  spend  the  money  and  time  to 
test  and  adopt  new  technologies.  Only 
when  the  prices  come  down  and  the  tech¬ 
nology  becomes  relatively  simple  to  imple¬ 
ment  do  they  jump  on  board.  Take  net¬ 
worked  storage,  for  example.  According 
to  Binder,  smaller  businesses  are  only  now 
adopting  networked  storage  implementa¬ 
tion,  five  years  or  so  after  large  companies 
started  SAN  or  NAS  projects. 

These  issues  cry  out  for  a  unified 
approach  to  information  management  that 
lets  growing  companies  innovate  while  still 
keeping  costs  low.  And  like  their  peers  at 
larger  companies,  many  have  turned  to 


Information  Lifecycle  Management  as  a 
way  to  manage  information  successfully. 

As  detailed  in  earlier  editions  of  this 
series,  Information  Lifecycle  Management 
is  not  a  product  but  rather  a  strategy 
geared  toward  managing  information. 
“[It]  is  a  strategy,  and  one  that  encom¬ 
passes  people,  processes  and  technology,” 
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says  Steve  Kenniston,  a  technology  analyst 
at  Enterprise  Storage  Group,  a  research 
company  based  in  Milford,  Mass.  Done 
right,  Information  Lifecycle  Management 
is  proactive  and  dynamic,  and  helps  com¬ 
panies  plan  IT  growth  to  meet  their  busi¬ 
ness  needs. 


INFORMATION  LIFECYCLE 
MANAGEMENT  FOR  GROWING 
COMPANIES 

While  CIOs  at  smaller  companies  may  be 
intimidated  by  the  idea  of  an  overarching 
information  management  strategy,  Infor¬ 
mation  Lifecycle  Management  is  a  vital 
tool  that  can  be  applied  to  any  size  busi¬ 
ness.  For  them,  the  smart  strategy  is  to 
break  Information  Lifecycle 
Management  into  smaller,  more  easily 
implemented  components. 

“When  you  talk  about  Information 
Lifecycle  Management  strategically,  it 
can  sound  like  something  for  the 
Fortune  1000  guys  to  do,”  says  Fisch. 
“But  you  can  also  think  of  Information 
Lifecycle  Management  in  pragmatic, 
practical  terms.  Email  archiving  to 
meet  compliance  regulations  or  mov¬ 
ing  data  off  main  production  storage  to 
ATA  disks  can  both  be  considered 
Information  Lifecycle  Management.” 

CIOs  at  small  to  mid-sized  companies  can 
do  Information  Lifecycle  Management — they 
just  need  to  do  it  in  a  way  that  suits  their  busi¬ 
ness  strategies  and  budgets.  “CIOs  can  use 
Information  Lifecycle  Management  to  solve 
the  concrete  problems  they  have  today,”  says 
Binder.  “Information  Lifecycle  Management 
can  be  moved  up  or  down  in  scope  to  suit  indi¬ 
vidual  company  requirements.” 

The  following  four-step  Information 
Lifecycle  Management  process  tends  to 
work  well  in  small  to  mid-sized  businesses: 

1  Consolidate  storage.  According  to 
EMC’s  Ellard,  it’s  not  unusual  for 
growing  businesses  to  be  heavily 
Windows-based  and  rely  on  the  attached 
storage  that  comes  when  they  purchase 
servers.  As  a  result,  their  storage  resources 
are  fragmented  and  difficult  to  manage. 


“Treating  information  as  a  separate  entity 
and  protecting  it  separately  sound  compli¬ 
cated  to  many  CIOs  at  smaller  companies, 
so  they  avoid  it,”  he  says. 

But  the  reality  is  that  consolidating  stor¬ 
age  doesn’t  have  to  be  complicated,  and  it 
is  essential  to  successfully  implementing 
Information  Lifecycle  Management. 
“Because  smaller  businesses  don’t  have  as 
much  content,  storage  consolidation  is 
lower  on  their  priority  list,  but  it’s  starting 
to  kick  in  for  many  now,”  says  Medina. 

For  many  companies,  that  may  mean  a 
foray  into  networked  storage,  an  arena  that 
has  become  progressively  simpler  and  less 
expensive  to  implement. 

“In  order  to  lay  the  foundation  for  some 
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Information  Lifecycle  Management  capa¬ 
bilities,  it’s  helpful  to  have  a  network  stor¬ 
age  structure  in  place,”  says  Fisch. 

However,  storage  consolidation  does¬ 
n’t  have  to  mean  a  SAN  or  NAS.  “You 
can  do  one  storage  array  with  a  mix  of 
Fibre  Channel  and  ATA  drives,”  says 
Ellard.  “It  doesn’t  mean  more  expensive 
storage;  it  means  getting  more  out  of  the 
storage  you  have.” 

In  the  end,  consolidating  storage  will 
end  up  saving  money  as  well  as  helping 
CIOs  plan  and  allocate  resources  more 
accurately. 

2  Address  backup  issues.  Many  companies 
with  smaller  storage  infrastructures  have 
no  company-wide  backup  strategy;  instead, 
they  address  recovery  issues  on  a  piecemeal, 
server-by-server  basis.  The  business  risk  is 
huge,  but  they  balk  at  the  time  and  money 


CIOs  can  attack 
Information 
Lifecycle 
Management 
step-by-step, 
such  as  an  email 
archiving 
project,  and  work 
forward  from 
there. 

“The 

strategy  is  to 
take  it  in 
pieces,” 
says  Sink, 
“it’s  not  a  big 
bang 

approach.” 

— Mike  Sink, 

IT  operations 
manager, 
Kichier  Lighting 
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questions  about 

Information  Lifecycle 
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frequently  asked 
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necessary  to  build  a  comprehensive  infor¬ 
mation  protection  and  recovery  policy. 
“Nearly  all  of  our  customers  with  smaller 
storage  infrastructures  say  that  they  have  a 
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backup  problem,”  says  Binder.  Many  can¬ 
not  get  their  information  physically  backed 
up  in  the  window  available,  while  others 
risk  regulatory  fines  for  not  complying  with 
regulations  around  the  access  and  availabil¬ 
ity  of  certain  types  of  data.  But  Information 
Lifecycle  Management,  which  automates 
many  backup  procedures  and  does  so  across 
the  entire  storage  platform,  can  in  itself  con¬ 
stitute  a  simple  backup  policy. 

3  Build  tiered  storage.  Again,  growing  com¬ 
panies  might  hesitate  before  moving  into  a 
tiered  storage  strategy,  which  ties  the  value  of 
information  to  the  price  and  performance  of 
the  storage  where  it  resides.  But  implementing 
tiered  storage  is  itself  a  relatively  simple 
process.  “It  can  be  as  basic  as  having  a 
CLARiiON  array  and  having  Fibre  Channel 
disks  and  ATA  disks  and  doing  snapshot 
copies,”  says  Fisch.  “If  you  have  more  than 
one  tier  of  storage,  move  the  data  between  the 
tiers  and  do  some  sort  of  classification,  it’s  fair 
to  call  it  Information  Lifecycle  Management.” 

In  fact,  Kichler  Lighting’s  Sink  is  doing 
just  that.  He  has  a  CLARiiON  array  with 
ATA  and  Fibre  Channel  on  one  array.  “It’s 
an  opportunity  to  use  less  expensive  disks 
for  data  that’s  used  less  frequently,”  he  says. 

4  Optimize  with  management  tools. 

By  layering  software  on  top  of  the  stor¬ 
age  infrastructure,  CIOs  can  set  automated 
data  policies  and  manage  information  bet¬ 
ter,  saving  money  and  streamlining  opera¬ 


tions  in  the  process. 

“There  will  be  some  software  on  top 
that  helps  move  the  data  around,”  says 
Fisch.  “Which  utility  CIOs  choose  depends 
on  the  problem  they’re  trying  to  solve.” 

For  example,  Sink  is  interested  in  a  data¬ 
base  extender  that  will  automatically  archive 
less  valuable  or  seldom-accessed  data  in  his 
PeopleSoft  system.  “I  think  the  next  phase  of 
Information  Lifecycle  Management  is  where 
you  use  a  set  of  tools  that  will  automate  a  lot 
of  migration  from  one  tier  of  storage  to  the 
next,”  Sink  says.  This  process  would  offer 
the  added  advantage  of  significant  cost  sav¬ 
ings  through  integration  and  operational 
efficiencies.  “It’s  all  about  efficiency  and  sav¬ 
ing  money,”  he  says. 

Moreover,  CIOs  can  attack  Information 
Lifecycle  Management  step  by  step,  start¬ 
ing,  say,  with  an  email  archiving  project, 
and  working  forward  from  there.  “The 
strategy  is  to  take  it  in  pieces,”  says  Sink. 
“It’s  not  a  big-bang  approach.” 

Fisch  advises  CIOs  to  first  analyze  their 
pain  points.  “CIOs  might  not  even  know 
that  what  they’re  doing  is  a  form  of 
Information  Lifecycle  Management,  but  if 
they  look  at  the  principle  underneath, 
they’ll  see  the  broader  concept,”  he  says. 

Information  Lifecycle  Management  is  not 
something  that  can  be  implemented  off  the 
shelf,  nor  is  it  one-size-fits-all.  In  fact, 
Information  Lifecycle  Management  looks 
very  different  at  every  company  simply 
because  the  strategy  has  to  address  different 
business  needs.  In  the  end,  that’s  really  what 
Information  Lifecycle  Management  is  all 
about:  by  letting  growing  companies  take 
the  first  steps  toward  managing  corporate 
information  on  a  company-wide  basis,  it 
serves  a  business  need. 


NEXT:  In  the  final  part  of  this  series, 
we’ll  answer  the  most  frequently  asked 
questions. 

FOR  MORE  INFORMATION 

where  information  lives  Visit  WWW.emC.COm/ilm 

for  an  in-depth  look  at  Information  Lifecycle 
Management  products,  services  and  strategies. 
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Meet  Joe  [not  his  real  name). 


Joe  forgot  how  much 
was  riding  on  his  decision. 


He  forgot  about  the 
CIO  Evaluation  Center 

Don’t  make  Joe’s 
mistake... 
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The  Resource 
for  Information 
Executives 

nnouncing  the  CIO  Evaluation  Center.  CIO  magazine  and  Technology  Evaluation  Centers  Inc.  have 
oined  forces  to  make  available  to  CIO  magazine  readers,  a  cutting  edge  online  tool  that  impartially 
:ompares  enterprise  software  products,  side-by-side  and  interactively. 


t  could  have  shown  Joe  which  product  best  matched  his  needs. 

Joe  was  last  seen  scrutinizing  the  CIO  Evaluation  Center  at:  http://www.theciostore.com 


BAD  NEWS  FOR  ANALYSTS 
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The  roots  of  the  disconnect 
between  analysts  and  CIOs 

How  CIOs  can  get  what  they 
need  for  less 

Forecast  for  the  advisory 
services  market 


Answer:  "We’ve  reduced  costs  on  IT  advisory  services  by  40  percent," 
says  Greg  Smith,  vice  president  of  IT  and  CIO  of  the  World  Wildlife  Fund, 
“and  we  haven't  seen  a  difference.  We  execute  the  same  as  we  always 
have,  just  at  a  much  lower  cost.” 

“Our  spending  on  analysts  is  down  50  percent,”  says  John  Halamka, 
CIO  of  CareGroup  Healthcare  System,  a  network  of  prestigious  hospi¬ 
tals  affiliated  with  Harvard  Medical  School.  “The  role  of  the  analysts  as 
information  navigators  is  not  as  relevant  anymore.” 

“We  cut  [Meta]  right  out  three  years  ago,”  says  Jean  Wilson,  vice  pres¬ 
ident  of  information  services  at  L.L.  Bean.  “I  don't  think  saying  to  our 
executives,  'Well,  Meta  says  X,'  carries  a  lot  of  weight  at  this  point.” 

Outsell,  a  company  that  tracks  the  analyst  industry,  echoes  this  sen¬ 
timent  in  its  2003  report  “Competitor  Assessment:  Watching  the  IT 
Watchers— A  Segment  in  Turmoil."  From  2002  to  2003,  the  average  per 
company  spending  on  IT  research,  reports  and  services  declined 
41  percent,  from  $127,905  to  $75,786.  Outsell  predicts  it  will  fall 
another  11  percent  this  year,  to  a  relatively  meager  $67,434,  saying, 
"The  math  points  to  little  or  no  growth,  or  even  declining  growth,  for  the 
foreseeable  future.” 

More  bad  news  for  the  influence  industry:  CIOs  who  signed  multi¬ 
year  contracts  two  and  three  years  ago  now  want  out.  "We're  under 
contract  [with  one  of  the  large  IT  analyst  firms],  but  we’ll  be  rethinking 
that  spend,"  says  a  CIO  who  requested  anonymity. 

Even  IT  executives  who  haven’t  yet  reduced  spending  sound  like  they 
might.  “We  can  afford  to  keep  our  subscriptions,"  says  Anne  Rogers, 
director  of  information  safeguards  at  Waste  Management,  “and  we  still 
get  some  good  information.  But  the  influence  the  analyst  firms  have  is 
waning.  Their  information  is  somewhat  more  questioned.  I’m  not  sure 
they’ll  ever  hold  that  pedestal  position  anymore.” 
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“My  recommendation  to  CIOs  is  clear," 
says  World  Wildlife  Fund  CIO  Greg  Smith 
“Buy  research  on  a  trial  basis.  Do  com¬ 
parisons  with  boutiques.  Let  the  vendors 
know  they’re  not  the  only  game  in  town. 
You  can  get  high-quality  research  at  an 
affordable  price  through  the  Internet. 

I  know  for  a  fact  this  works." 
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“I  think  they  got  quite  arrogant,”  says  L.L.  Bean  VP  of  IS  Jean  Wilson  about  analyst 
pricing.  “There’s  no  way  I’d  have  the  patience  for  a  subscription  service  again.” 


Every  one  of  these  CIOs  say  that  analysts 
provide  a  service  they  need,  but  they  are  no 
longer  willing  to  pay  what  the  companies 
want  to  charge  them  and,  more  important, 
they  don’t  want  to  pay  the  way  the  analysts 
want  them  to — by  subscription. 

The  consequences  of  this  disconnect  are 
clear:  painful  rounds  of  layoffs,  property  sell- 
offs  and  other  cost-cutting  indignities.  Giga 
simply  surrendered  a  year  ago  this  month  and 
was  acquired  by  Forrester.  Then,  in  Decem¬ 
ber  2003,  Gartner,  the  industry’s  dominant 
player,  with  an  estimated  43  percent  of  the 


Share  Your  Opinion 


Have  you,  like  the  CIOs  in  this  story,  reduced 
your  reliance— or  at  least  spending— on  ana¬ 
lysts?  Go  to  the  ADD  A  COMMENT  box  on  the 
online  version  of  this  story  to  compare  notes 
with  peers  on  your  decision.  In  the  meantime, 
check  out  CIO's  story,  "How  to  Analyze  the 
Analysts,"  pointing  out  industry  flaws  and 
how  to  avoid  falling  prey  to  them.  Find  it  at 
www.cio.com/printlinks. 

cio.com 


market,  cut  5  percent  of  its  workforce  and 
took  a  $30  million  restructuring  charge. 

Ironically,  the  IT  analysts  have  been  unable 
to  do  for  themselves  what  CIOs  have  paid 
them  billions  of  dollars  over  the  years  to  do: 
forecast  a  market  trend. 

As  a  result,  these  companies  are  undergoing 
what  Outsell  calls  “permanent  structural 
change.”  While  the  Big  Five  companies — 
AMR  Research,  Forrester,  Gartner,  IDC  (a 
sister  company  to  CIO)  and  Meta  Group — 
will  likely  survive,  and  maybe  even  rebound 
(see  “What  the  Players  Are  Saying,  ”  Page  58 ), 
they  won’t  rebound  as  firms  focused  on  IT 
research  and  analysis.  They  are  becoming 
different  kinds  of  companies,  offering  differ¬ 
ent  products  to  different  customers.  (IDC 
historically  has  derived  the  lion’s  share  of  its 
revenue  from  vendor  companies.) 

They  already  do  more  consulting  than  ever 
before;  they’re  trying  to  make  up  for  CIOs’ 
lack  of  spending  by  selling  directly  to  business 
unit  leaders  and  new  customers  such  as  finan¬ 


cial  analysts.  When  they  do  target  IT,  it’s  with 
peer  networking  and  community  services 
(roundtable  breakfasts,  online  seminars) — 
services  in  which  research  and  analysis  are 
tack-ons  to  a  broader  offering. 

It’s  not  that  traditional  research  and  analy¬ 
sis  is  suddenly  worthless. 

It’s  just  worth  less. 

This  puts  CIOs  in  a  great  position.  “My  rec¬ 
ommendation  to  CIOs  is  clear,”  says  Smith. 
“Do  comparative  shopping.  Buy  research  on  a 
trial  basis.  Do  comparisons  with  boutiques.  Fet 
the  vendors  know  they’re  not  the  only  game  in 
town.  You  can  get  high-quality  research  at  an 
affordable  price  through  the  Internet  or  on  a 
per-call  basis.  I  know  for  a  fact  this  works.” 

HOW  WE  GOT  HERE 

The  success  of  the  IT  research  industry  was 
based  on  a  simple  formula:  People  will  pay  for 
knowledge  predicated  on  access.  The  earliest, 
most  influential  figure  in  the  industry  was  for¬ 
mer  IBM  employee  Gideon  Gartner.  He 
founded  his  eponymous  company  in  1 979  and 
immediately  its  value  to  IS  was  obvious:  Gart¬ 
ner’s  IBM  experience  was  worth  paying  for  if 
you  wanted  to  buy  IBM  mainframes.  He 
brought  MIS  executives  together  to  negotiate 
better  prices  from  the  Big  Blue  monopoly. 

The  rapid  rate  of  technological  develop¬ 
ment  also  enabled  analysts  to  charge  premi¬ 
ums  for  their  research.  There  was  always 
something  new — minis,  PCs,  networks, 
viruses,  Y2K.  This  afforded  plenty  of  room  for 
firms  large  and  small.  Aberdeen,  Dataquest, 
Dell’Oro  Group,  Forrester,  Gartner,  Giga, 
IDC,  IntelliQuest,  Meta,  Yankee  Group — 
every  analyst  firm  sold  some  version  of  the 
kind  of  access  Gartner  pioneered,  access  to 
vendors,  product  plans  or  statistical  data. 

As  early  as  the  1980s,  users  asked  for  con¬ 
sulting,  too,  and  the  analysts  added  some,  but 
carefully.  They  needed  to  make  sure  they  pro¬ 
tected  the  IT  research  business  because  it  was 
based  on  subscriptions  and  provided  a  contin¬ 
uous  revenue  stream.  Businesses  depend  on 
predictable,  repeatable  revenue.  Consulting 
produced  one-time  revenue. 

When  the  Internet  first  arrived,  it  appeared 
Continued  on  Page  54 
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on  analyst  services,  and  no  matter  how  much  the 
economy  rebounds,  it’s  unlikely  they’ll  ever  spend  as  much  as  they  once  did.  But  they  say  they 
can  get  the  same  quality  of  research  and  analysis  as  before  with  a  much  smaller  investment. 
Here’s  how  they’re  doing  it. 


Figure  out  what  you  already  have.  CIOs 
are  often  surprised  to  learn  what  serv¬ 
ices  are  being  used  by  lower-level  IT 
staff,  and  even  more  surprised  to  learn  what 
subscriptions  they’re  paying  for  that  they 
don’t  use.  “CIOs  tell  us,  ‘Oh,  we  use  just  this 
one  firm,”’  says  Norma  LaRosa  of  the  Kens¬ 
ington  Group,  an  analyst-tracking  company. 
“But  I’ve  already  talked  to  their  staff,  and  their 
staff  is  using  about  five  other  firms  too.  ” 

Figure  out  what  you  need.  After  taking  an 
inventory  of  your  library  and  subscrip¬ 
tions,  cut  the  deadwood.  “  Subscriptions 
are  only  good  when  you  have  huge  initiatives 
that  require  ongoing  analysis,  ”  says  Louise  Gar¬ 
nett,  vice  president  and  lead  analyst  of  Outsell.  In 
most  other  cases,  whether  you’re  trying  to  learn 
about  a  market,  get  smaller  projects  rolling  or 
do  basic  remediation,  by-the-drink  purchasing 
of  research  and  analyst  services  is  preferable. 

If  you've  got  a  subscription,  use  it.  “It’s 
actually  work  to  make  sure  we’re  uti¬ 
lizing  our  Meta  subscription,”  says  the 
vice  president  of  IT  at  a  large  manufacturing 
company.  “  I’ve  got  people  who  use  a  lot  of  dif¬ 
ferent  ways  to  get  information”  without  think¬ 
ing  to  use  the  subscription.  “I  just  have  to  make 
sure  we’re  using  the  service  we’re  paying  for.  ” 

Replace  research  services  you  pay 
for  with  experts  you  already  employ. 

“Without  a  doubt,  we’re  smarter 
about  IT  in-house,”  says  World  Wildlife  Fund 


Vice  President  of  IT  and  CIO  Greg  Smith.  “I 
only  go  to  research  if  I  don’t  have  the  answer.  ” 
But  more  often  than  not,  Smith  has  found  that 
someone  in  his  department  will. 

Use  boutique  analyst  firms.  Boutique 
analyst  firms  that  specialize  in  a  narrow 
band  of  technologies  or  processes  are 
good  for  hand-holding  on  a  project,  details 
within  projects  (for  example,  HIPAA  compli¬ 
ance),  and  they’re  likely  to  be  happy  to  work 
with  you  on  a  per-project  basis.  Both  Care- 
Group  Healthcare  System  CIO  John 
Halamka  and  Vice  President  and  CIO  John 
Glaser  of  Partners  Healthcare  System  have 
shifted  their  resources  from  big  analyst  com¬ 
panies  to  boutiques.  “Health  care  has  all  sorts 
of  new  IT  analyst  groups,”  Glaser  says.  “Deep 
is  better  than  broad  now,”  says  Halamka. 

Use  analysts,  not  firms.  When  you  find 
an  analyst  with  whom  you  work  well, 
whether  from  a  big  firm  or  a  boutique, 
care  for  that  relationship.  “We  needed  to  ana¬ 
lyze  our  website,  and  when  we  found  a  guy  at 
Meta,  he  was  amazing,  worth  every  penny,” 
says  a  chief  technologist  from  a  large  manu¬ 
facturing  company.  “When  you  find  one  of 
them,  you  don’t  want  to  let  him  go.  ” 

If  your  analyst  jumps  to  another  firm, 
jump  with  him.  In  the  long  run,  the  per¬ 
sonal  relationship  you  have  with  your 
analyst  is  more  important  than  the  method¬ 
ologies  of  the  company  he  works  for. 


Demand  metrics  on  analysts’  experience. 

You  have  every  right  to  know  if  the 
analysts  have  ever  been  on  a  project 
comparable  to  yours,  what  clients  they’ve 
advised  in  the  past,  and  how  many  years 
they’ve  been  in  the  business. 

Demand  ethics.  Ask  firms  for  a  break¬ 
down  of  their  revenue  by  sector  (ven¬ 
dor,  end  user,  other).  Ask  analysts  for 
the  names  of  the  clients  they’ve  worked  for. 
That  might  color  their  analysis.  Ask  them  to 
show  you  their  company’s  ethics  policy. 
“CIOs  never  asked  who  paid  us,”  says  former 
Giga  and  Forrester  analyst  Rob  Enderle. 
“They  didn’t  ask  about  our  relationships  to 
vendors.  I  was  always  kind  of  surprised  that 
they  didn’t  seem  all  that  interested  or  con¬ 
cerned  about  it.” 

“If  CIOs  ever  knew  how  much  energy  and 
money  is  being  spent  by  vendors  to  buy  influ¬ 
ence  while  maintaining  that  sense  it  comes 
from  an  independent  authority,  they’d  be 
shocked,”  says  LaRosa. 

Set  the  price.  Negotiate.  Shop. 

Pit  analysts  against  each  other. 

“It’s  a  buyer’s  market.  The  com¬ 
petition  is  the  most  intense  I’ve  ever  seen,” 
says  the  vice  president  of  IT  at  the  large  man¬ 
ufacturing  company.  “I’ve  had  more  face  time 
in  the  last  eight  months  with  a  Gartner  rep 
than  ever — and  I’m  not  even  a  Gartner  guy. 
Right  now,  we’re  paying  by  the  drink  for  a  lot 
of  services.  Salary  benchmarks.  IT  spend 
benchmarks. 

“Look,  they  don’t  have  a  choice.  As  we  try 
to  reduce  spending  we’ve  found  we  can  say, 
‘We’ll  take  just  that.’” 

-S.B. 
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Continued  from  Page  52 
as  if  the  analysts  would  grow  richer  still, 
like  oilmen  stumbling  on  Alaska.  Suddenly 
there  were  dozens  of  new  markets — 
browsers,  Web  servers,  e-commerce,  secu¬ 
rity  and  so  forth — that  CIOs  needed 
analysts  to  sort  out.  Initially,  demand  did 
skyrocket.  But  the  Internet’s  ultimate  effect 
proved  to  be  exactly  the  opposite,  as  if  the 
analysts  were  railroadmen  stumbling 
upon  the  automobile.  The  Internet  deval¬ 
ued  access.  It  had  been  priced  at  a  premium 
because  CIOs  didn’t  have  it.  Now  they  did. 

Some  CIOs  started  to  replace  analysts 
with  research  by  their  own  in-house  experts 
and  peer-networking  groups,  either  online 
or  through  e-mail.  Today,  access  is  ubiqui¬ 
tous  and  sophisticated  to  the  point  that 
CareGroup’s  Halamka  asks  rhetorically, 
“Why  buy  Gartner  when  Google’s  free?” 

By  1 998,  the  IT  analysts’  revenue  growth 
was  already  slowing  and  margins  were  thin¬ 
ning.  Then,  in  2000,  the  bubble  burst.  That 
accelerated  the  analyst  firms’  revenue 
decline  by  discouraging  their  clients  from 
spending  on  nonessentials.  It  also  slowed 
the  development  of  the  new  technologies 
upon  which  the  analysts  had  feasted. 

Many  analyst  companies  responded  by 
increasing  their  focus  on  consulting.  It 
was  one-time  revenue,  but  it  was  revenue. 

THE  DISCONNECT 

Since  then,  every  remedial  step  the  analysts 
have  taken  to  shore  up  revenue  and 
appease  stockholders  has  exacerbated  their 
disconnect  from  CIOs.  When  the  research 
firms  went  left,  CIOs  looked  right.  If  the 
research  firms  offered  white,  CIOs  needed 
black.  It  was  the  opposite  of  syzygy. 

For  example,  analysts  got  younger  just 
when  CIOs  started  yearning  for  more  vet¬ 
eran  IT  analysts  with  real-world  experi¬ 
ence  to  help  with  complicated  integration 
projects.  Many  IT  analyst  companies  got 
rid  of  their  most  experienced  analysts  in 
favor  of  less  expensive  “newbies  out  of 
Cornell,”  as  one  ex-analyst  put  it.  Norma 
LaRosa,  president  of  Kensington  Group, 
another  company  that  tracks  analysts, 
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Gartner's  revenue  decline  by  percentage 
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SOURCE:  Gartner  2001-2002  annual  reports,  2003  earnings  statement 


Analysis  Down  (Consulting  Up) 

Percentage  of  revenue  derived  from 
consulting  versus  analysis 
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Note:  Numbers  don’t  add  up  to  100%  because  there  are  other  sources 
of  revenue. 

SOURCE:  Gartner  2001-2002  annual  reports,  2003  earnings  statement 


Experience  Down 

Average  experience  of  analysts  industrywide 
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reports  that  in  the  past  decade,  the  aver¬ 
age  experience  of  analysts  has  shrunk 
from  more  than  10  years  to  about  three. 

CIOs  now  get  from  their  own  staffs  the 
academic  trending  and  forecasting  serv¬ 
ices  that  the  newbies  can  provide.  “The  dif¬ 
ference  is  more  and  more  companies  have 
people  like  myself  who  are  embedded  in 
technology,”  says  the  chief  technologist  of 
a  manufacturing  company  that  recently 
cut  25  percent  of  its  advisory  services 
budget.  “When  I’m  sitting  down  to  figure 
out  a  new  wireless  technology  and  who  the 
right  players  are,  I  would  not  go  to  an  ana¬ 
lyst  firm,”  he  says.  “I  do  it.” 

What  CIOs  can’t  get  from  their  own 
staffs,  they  want  from  someone  who’s  been 
inside  a  f  actory  full  of  problems,  not  some¬ 
one  who’s  studied  up  on  them  in  Supply 
Chain  101.  One  analyst  who  requested 
anonymity  observes,  “CIOs  are  more 
sophisticated  today.  They’re  asking  how 
to  build  the  building.  Analysts  are  still 
telling  them  about  the  hammer  market.” 

The  analyst  companies  have  also  down¬ 
played  personal  relationships  (possibly 
because  they  let  go  of  the  analysts  who  had 
them)  in  favor  of  products  (Gartner’s 
Magic  Quadrant,  Forrester’s  WholeView 
research,  Meta’s  Infusions)  just  when  CIOs 
wanted  more  personal  interaction. 

Analysts  have  sought  to  reverse  the  rev¬ 
enue  decline  by  increasing  value — for 
example,  linking  consulting  to  analysis. 
But  what  CIOs  want  is  a  lower  price.  “Any 
time  we  have  a  conversation  now,  it’s,  ‘We 
can  help  you  write  that  RFP,’  or  ‘We  can 
help  you  with  that  contract,”’  says  World 
Wildlife’s  Smith.  “They  want  to  consult, 
but  their  rates  are  too  high.” 

DESPERATELY 

SEEKING 

SUBSCRIPTIONS 

The  analysts  have  gotten  the  message  that 
CIOs  want  relationships,  not  products,  and 
are  trying  to  respond.  They  have  set  up  peer 
networking — communitylike  services  in 
which  CIOs  can  talk  through  problems 
with  their  peers,  meet  by  vertical  industry 
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“Why  buy  Gartner  when  Google  is  free?”  asks  CareGroup  Healthcare  System 
CIO  John  Halamka. 


or  by  common  interest,  and  get  unfettered 
access  to  analysts  and,  by  the  way,  research. 
(CXO  Media,  publisher  of  CIO ,  has  recently 
begun  a  peer- networking  initiative  of  its  own.) 

Gartner’s  community  of  CIOs  is  called 
EXP,  and  Ellen  Kitzis,  group  vice  president  for 
EXP,  says  it’s  profitable  and  growing.  There 
were  150  roundtable  breakfasts  last  year, 
including  sessions  exclusively  for  female 
CIOs.  Forrester’s  service  is  called  Oval  and  is 
central  to  the  company’s  efforts  to  grow. 

But  the  services  are  still  subscription-based 
(as  is  CXO’s).  Instead  of  responding  to  CIOs’ 
call  for  more  “by  the  drink”  pricing,  the  ana¬ 
lysts  have  stuck  to  their  contract  model  in  the 
hope  that  adding  value  will  help  the  CIO  jus¬ 
tify  continuing  his  subscription. 

However,  CIOs  say  the  problems  they  face 
now  are  more  tactical  than  strategic.  The  vice 
president  of  IT  at  a  large  manufacturer  says  he 
needs  help  with  validation  of  systems  and  com¬ 
pliance,  tasks  he  considers  more  suited  to  one- 
off  engagements  than  long-term  commitments. 

But  most  of  the  big  analysts  are  holding  fast 
to  the  subscription  model.  Reinventing  some¬ 
thing  as  fundamental  as  subscription  pricing 
may  be  too  profound  a  transformation  for  large 
public  companies  to  consider.  Changing  your 
pricing  scheme  qualifies  as  a  reason  for  investors 
to  panic,  even  if  it’s  the  right  thing  to  do  by  CIOs. 

“I  think  they  got  quite  arrogant,”  L.L. 
Bean’s  Wilson  says  about  analyst  pricing. 
CareGroup’s  Halamka  adds,  “We’ve  been 
surprised  by  their  lack  of  willingness  to  con¬ 
sider  alternative  pricing  models  such  as  ‘pay 
as  you  go.’  Hopef  ully,  their  loss  of  revenue  will 


result  in  more  customer- friendly  pricing.” 

Smith  canceled  his  EXP  subscription,  say¬ 
ing,  “I’m  just  flat  out  too  busy  [to  partici¬ 
pate].”  Wilson  networks  with  peers  on  her 
own  and  says  the  subscription  model  is  why. 
“There’s  no  way  I’d  have  the  patience  for  a 
subscription  service  again,”  she  says. 


THE  FORECAST:  POOR 

To  bring  back  CIO  dollars,  the  analysts  are  try¬ 
ing  to  adapt.  Meta  and  IDC  are  offering  more 
by-the-drink  pricing.  Gartner  offers  one-day 
engagements  with  analysts.  They’re  building 
their  expertise  in  the  tactical  pursuits  that 
occupy  IT  departments  these  days,  such  as  com- 


CIOs  don’t  see  a  problem  with  analysts  consulting  for  vendors 


There’s  a  popular  perception 
that  the  problem  with  the 
analysts’  business  model  is 
the  conflict  of  interest  inher¬ 
ent  in  depending  on  revenue 
from  the  vendors  they  ana¬ 
lyze  for  CIOs.  Many  former 
analysts  and  industry  watch¬ 


ers  believe  it  is,  in  fact,  a  con¬ 
cern,  saying  that  at  the  very 
least  it  puts  an  unreasonably 
optimistic  sheen  on  forecast¬ 
ing  and  research.  "What  ana¬ 
lyst  at  a  public  company  is 
going  to  tell  you  to  skip  a  gen¬ 
eration  of  a  product  made  by 


one  of  the  vendors  that’s  pay¬ 
ing  him?”  asks  Jerry  Michal- 
ski,  a  former  analyst  at  New 
Science  Associates  (which 
was  acquired  by  Gartner  in 
1993)  and  now  president  of 
his  own  boutique  firm,  Soci- 
ate.  “Who's  going  to  have  the 


courage  to  risk  that  revenue?” 

But  most  CIOs  believe  this 
is  a  nonissue.  "We  know  how 
to  navigate  around  that,"  says 
CareGroup  Healthcare 
System  CIO  John  Halamka. 
"It’s  a  fact  of  life.  We  can  deal 
with  it.”  -S.B. 
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pliance  with  Sarbanes-Oxley  as  well  as  integra¬ 
tion  and  logistics  challenges.  And  they’re  build¬ 
ing  the  community  services  for  CIOs  to  replace 
revenue  lost  in  research  and  forecasting. 

“I’m  not  dismissing  the  fact  that  Gartner, 
like  others,  is  struggling  to  determine  how  to 
provide  the  right  value,”  says  Gartner’s  Kitzis. 
“But  I  think  we’ve  realized  the  value  has  gone 
away  from  just  giving  [CIOs]  information. 
We’re  focusing  on  the  relationship  versus  just 
the  information.  We  need  to  put  the  strong 
relationship  model  in  place” — via  services  like 
EXP — “to  figure  out  first  their  priorities,  then 
what  they  want  to  see  and  how  they  want  to 
see  it.” 

Even  here,  Smith  of  the  World  Wildlife 
Fund  thinks  that  the  analysts’  efforts  may  have 
the  opposite  of  their  intended  effect.  He  val¬ 
ues  Gartner’s  online  tools  so  much  that  he 
doesn’t  need  their  advanced  services.  “The 
search  and  delivery  is  so  good  it’s  putting  the 
high-end  services  out  of  business,”  he  says. 

If  analyst  companies  give  CIOs  what  they 
want — flexible  by-the-drink  pricing,  one-time 
engagements,  tactical  expertise — they  have  to 
be  able  to  make  a  business  out  of  it.  The  best 
product  in  the  world  will  still  fail  if  it’s  not  as 
profitable  for  the  seller  as  it  is  useful  to  the 
buyer.  So  far,  it’s  not  clear  whether  any  of  the 
analyst  companies  have  untangled  the  new 
economics  of  IT  advisory  services. 

“You  look  at  a  business  that  tries  to  sell  one- 
off  relationships,  and  you  realize  it’s  a  very  hard 
business  model,”  says  Louise  Garnett,  vice 
president  and  lead  analyst  of  Outsell.  There’s 
a  reason,  she  says,  investors  get  nervous  when 
repeatable,  predictable  revenue  (that  is,  sub¬ 
scriptions)  shrinks  in  favor  of  customer-friendly 
by-the-drink  pricing.  “You’re  never  sure  how 
much  people  want  to  drink.  You  need  the  same 
inventory  for  an  unknown  demand.” 

In  other  words,  the  pricing  and  services 
CIOs  want  from  analyst  companies  may,  in 
fact,  contribute  to  their  decline. 

Any  good  analyst  could  look  at  that  situa¬ 
tion  and  realize  that  the  forecast  for  their 
industry  is  poor.  Era 


Senior  Editor  Scott  Berinato  can  be  reached  at 
s  berinato@cio.com. 


The  IT  analyst  industry  is 
suffering  because... 

The  focus  on  vendor  revenue  is  driving 
good  analysts  away.  “One  of  the  rea¬ 
sons  I  left  is  because  of  an  increasingly 
clear  connection  between  the  revenue 
you  personally  generated  from  vendors 
and  your  flexible  income  [bonuses].  You 
had  several  key  measures  you  were 
gauged  against,  and  one  of  the  key 
measurements  was  consulting.  I  was 
worried  about  the  conflict  of  interest.” 

-ROB  ENDERLE,  formerly  of  Giga  and  Forrester, 
now  principal  analyst  of  Enderle  Group 

They  are  trying  to  be  consultants.  “Meta 
would  get  $5,000  for  me  doing  a  15 
minute  ‘Webinar.’  A  vendor  would  shell 
out  that  much  for  an  analyst  to  do  15 
minutes.  It’s  hard  to  turn  that  kind  of 
revenue  down.” 

-DAVID  SCOTT  LEWIS,  former  vice  president  of 
e-business  strategies  at  Meta,  now  president  and 
principal  analyst  for  IT  E- Strategies 

The  large  firms  are  overtaxed.  “The  ven¬ 
dors  need  the  general  forecasting  and 
market  trends  much  more  than  the  CIOs 
now,  so  that’s  where  the  business  is 
going.  At  some  point,  feeding  the  beast 
becomes  more  important  than  doing 
well  the  thing  you  were  set  up  to  do.” 

-KEN  SMILEY,  former  analyst  at  Giga 
(and  Forrester  when  it  was  acquired),  now  prin¬ 
cipal  analyst  of  Smiley  Research  Group 

The  companies  have  lost  experienced 
people.  “I  love  the  idea  [from  Alan  Kay, 
a  personal  computing  pioneer]  that  a 
point  of  view  is  worth  80  IQ  points.  The 
best  way  to  a  mature  point  of  view  is  to 
have  actual  experience  doing  the  thing 
you’re  analyzing." 

-JERRY  MICHALSKI.  former  vice  president  and 
research  director  of  New  Science  Associates  (which 
was  bought  by  Gartner)  and  former  editor  of  Esther 
Dyson's  "Release  1.0."  now  president  of  Sociate 


We’re  fine  because... 

We  can  handle  new  business.  "Other 
firms  might  be  messaging  that  they're 
shifting  to  consulting.  We’re  not  saying 
that.  We’re  saying  we’re  a  big  firm  that 
can  do  both  the  old  services  and  adapt 
to  provide  the  new  ones." 

-JOE  BAYLOCK.  group  vice  president.  Gartner 

We’re  business-focused.  “Our  business 
always  focused  on  technology  seg¬ 
ments.  Now  we  organize  research 
teams  by  the  problems  CIOs  deal  with. 
We  have  a  team  focused  on  Sarbanes- 
Oxley,  a  team  focused  on  supply  chains. 

I  believe  CIOs  want  this  differentiated 
value  and  will  pay  a  subscription  for  it." 
-TONY  FRISCIA.  president  and  CEO,  AMR  Research 

We  can  win  back  the  subscriptions. 

“We’ve  found  there  are  higher  subscrip¬ 
tion  renewal  rates  for  clients  who  use 
the  one-off  consulting  services.  It’s  a 
matter  of  buildingthat  relationship. 
Forrester  was  research-centric.  When 
we  bought  Giga,  they  were  more  rela¬ 
tionship-centric.  We  needed  both;  now 
we’ve  got  them." 

-BRIAN  KARDON,  chief  strategy  and 
marketing  officer,  Forrester 

We’re  private. “Public  company  competi¬ 
tors  were  forced  to  focus  on  operational 
efficiency.  They  went  to  all-you-can-eat 
pricing.  We’ve  been  able  to  maintain 
more  flexible  pricing  options.  Being  a  pri¬ 
vate  company  helped,  absolutely.” 

-GIGI  WANG,  senior  vice  president  of  strategy.  IDC 

We’re  focused  on  the  practical.  “We 

moved  to  differentiate  as  soon  as  we 
saw  the  market  shift.  The  new  model  is 
to  be  the  trusted  adviser,  which  is  built 
on  research  and  deep  relationships,  fol¬ 
lowed  up  by  pragmatic  advice.  ” 

-FRED  AMOROSO,  vice  chairman,  president  and 

CEO.  Meta  Group 
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It's  one  week  until  your  next  vendor  audit, 
do  you  know  where  your  IT  assets  are? 
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Whether  you're  a  local  company  with  hundreds  of  IT  assets  or  a  global  business  with  hundreds  of 
thousands,  the  point  is  clear:  IT  assets  are  essential  to  business  and  growing  more  significant  by  the  day. 
Make  them  more  accountable  and  they'll  work  harder  toward  your  bottom  line.  To  find  out  more  about 
our  strategic  asset  management  solutions  for  IT,  visit  make-it-all-count.com/ITAM  or  call  800-244-3346. 
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Mary  Finlay,  deputy  CIO  of  Partners  Healthcare  System 
says  her  network  of  10  facilities  used  to  manage  each 
virus  as  it  came.  She  set  up  a  system  for  updating 
antivirus  software  across  all  the  group’s  hospitals  to 
attack  problems  in  a  more  organized  and  effective  way. 


' 


I  ■ 


Viruses.  Spam.  Software  patches.  Upgrades.  Nuisances  that 
nibble  at  IT  shops  everywhere.  Attacking  them  as  a  class  of 
problems  elevates  your  security  readiness.  by  kim  girard 


Reader  ROI 

►  Why  CIOs  should  think  of 
spam,  viruses  and  other 
nuisances  as  a  manage¬ 
ment  problem 

►  Technology  tools  and 
strategies  for  dealing  with 
nuisances 

►  The  importance  of  end 
user  training 


it’s  never  a  good  night  for  the  IT  department 

when  the  first  person  to  get  hit  by  a  new  virus  is  the  CEO. 

That’s  exactly  what  happened  when  the  W32.Blaster  Internet 
worm  slipped  onto  the  notebook  of  ABM  Industries  chief  Henrik 
Slipsager.  Slipsager  was  booting  up  during  a  business  trip  in  Los 
Angeles  in  August  2003  when  the  error  message  that  defined  the 
Blaster  popped  up,  paralyzing  his  machine  and  millions  of  others 
across  the  globe.  The  CEO  began  calling  cell  phones  of  top  IT  staffers 
in  San  Francisco  looking  for  help. 

“It  was  5:30  on  a  Wednesday,”  recalls  Sean  Finley,  assistant  vice 
president  and  deputy  director  of  electronic  services  at  ABM,  a 
$2.3  billion  company  that  provides  janitorial,  lighting  and  security 
services  to  high-rise  buildings.  Finley,  a  15-year  veteran  of  the  com¬ 
pany,  says  he  called  an  ABM  website  administrator  in  Los  Angeles. 
“I  said:  listen,  you’ve  got  to  do  me  a  big  favor,”’  he  recalls.  Slip¬ 
sager  left  his  notebook  with  a  hotel  bellhop  as  the  employee  raced 
there  with  antivirus  software.  The  CEO's  computer  was  fixed.  But 
after  that  night,  the  way  ABM  dealt  with  viruses  changed. 
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Priceline.com  CIO  Ron  Rose  uses  automated  tools  to  upgrade  software 
#  on  hundreds  of  servers  at  his  Web  business.  “Before,  we  had  a  team  of 
six  people  applying  updates  on  a  machine-by-machine  basis,”  he  says. 


Instead  of  putting  out  fires,  ABM’s  IT 
group  moved  to  set  up  policies  that  mandate 
how  employees  use  antivirus  software.  One 
user  mandate:  No  network  log-on  without 
the  latest  virus  update  download. 

After  disasters  like  the  2003  blackout  in  the 
Northeast  and  the  devastation  of  9/11,  you’d 
think  CIOs  would  be  wearing  hard  hats  and 
duck  boots  to  the  office.  After  all,  they’ve  been 
training — prodded  by  worried  CEOs  and 
boards  of  directors — to  prepare  for  the  cata¬ 
strophic:  floods,  earthquakes,  power  outages, 
even  terrorist  attacks.  Not  surprising,  IT 
spending  on  disaster  recovery  by  global  finan¬ 
cial  services  companies  after  9/1 1  spiked 
1 9.2  percent  to  $3.4  billion — up  from  sleepier 
3  percent  to  5  percent  annual  increases 
throughout  the  1990s,  according  to  Tower 
Group.  Although  spending  dipped  by  6.4  per¬ 
cent  in  2003,  businesses  are  still  shelling  out 
unprecedented  amounts  of  their  IT  budgets 
on  security.  An  estimated  5.4  percent  in  2003 
went  to  bulk  up  security  compared  with 


3.1  percent  in  200 1 ,  according  to  Gartner. 

Of  course,  the  annoying  headaches  an  IT  staff 
tackles  every  day  might  seem  insignificant  when 
stacked  up  against  natural  disasters.  But  to  the 
average  company,  they  aren’t.  The  total  effect  of 
spam,  viruses,  software  upgrades  and  other  nig¬ 
gling  problems  is  a  plague  that  cost  U.S.  busi¬ 
nesses  billions  last  year.  Most  CIOs  know  this. 
They  realize  that  the  real  threat  isn’t  Armaged¬ 
don;  it’s  being  nibbled  to  death  by  ducks. 

“The  majority  of  our  time  is  spent  on  the 
little  things  that  prevent  the  big  things  from 
happening,”  says  Dan  Yee,  CIO  of  the  Cali¬ 
fornia  Independent  System  Operator  Corp. 
(the  not-for-profit  organization  that  manages 
the  state’s  power  grid  established  to  prevent 
electricity  shortages  and  blackouts).  Yee  says 
focusing  on  the  “little  things”  means,  for 
example,  splitting  end  users  into  different 
classes  (like  executives  and  other  workers), 
and  using  automated  tools  to  monitor  what 
software  gets  onto  their  PCs  in  an  effort  to 
head  off  problems  before  they  occur. 


CIOs  could  be  excused  for  delegating  these 
nuisance  issues  to  their  staff.  It  makes  sense  to 
divide  and  conquer,  to  quash  each  snafu  as  it 
comes  up.  Many  IT  executives  interviewed  for 
this  story  continue  to  follow  that  approach. 

But  it’s  also  not  hard  to  see  that  CIOs  who 
fail  to  treat  these  nuisances  holistically,  as  a  class 
of  problems  that  deserve  management’s  atten¬ 
tion  and  a  plan  of  attack,  do  so  at  their  peril. 

Spam,  for  one,  cost  corporations  $  1 0  billion 
in  2003 ,  according  to  Ferris  Research.  Look  at 
viruses:  Computer  Economics  estimates  that 
in  2003  the  endless  parade  of  7,064  new 
viruses,  worms  and  Trojan  horses  cost  compa¬ 
nies  more  than  $13  billion.  Even  seemingly 
benign  problems  like  employee  password 
changes  add  up.  These  requests  account  for  up 
to  half  the  help  desk  calls  in  a  given  year  and 
cost  a  company  about  $38  per  annoying  reset, 
according  to  Gartner.  Add  password  updates  to 
never-ending  nuisances  such  as  the  employee 
who  never  deletes  a  single  e-mail  in  10  years  or 
the  PC  user  who  crashes  his  computer  during 
massive  MP3  downloading,  and  the  road  leads 
to  one  all-encompassing  term  that  could  use  its 
own  army:  nuisance  management. 

The  good  news  is  that  CIOs  have  plenty  of 
weapons  in  their  utility  belts  to  fend  off  many 
of  these  recurring  problems.  Ideas  as  simple 
as  enforcing  a  better  written  policy  for  e-mail 
and  banning  certain  kinds  of  instant  messag¬ 
ing  applications  from  the  company’s  desktops 
can  make  a  big  difference.  Ultimately,  dealing 
with  nuisances  is  about  being  proactive  and 
learning  from  mistakes.  The  problems  might 
never  go  away,  but  they  can  be  controlled. 

ENGAGE  EVERY  NUISANCE, 
BUT  AVOID  BIG  BROTHER 

CIOs  often  walk  a  tightrope:  Trusting 

employees  is  important.  The  staff  shouldn’t 
be  forced  to  play  Big  Brother,  censoring  every 
software  download  or  website  visit.  But  trust¬ 
ing  too  much  can  lead  to  big  budget  trouble. 

Most  any  tech  administrator  knows  that  the 
sneakiest  network  bandwidth  stealers  are  often 
music  and  video  file-sharing  programs  such  as 
Audiogalaxy,  Kazaa,  LimeWire,  Morpheus  and 
NeoModus’s  Direct  Connect.  MP3  files,  at  only 
3MB  to  5MB  per  song,  might  seem  trivial — until 
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WHEN  IT  COMES  TO  ITANIUM  SERVERS, 
EVERYONE  ELSE  FOLLOWS. 


Introducing  the  fastest,  most  innovative  Itanium  2  servers  from  NEC  Solutions  America. 


When  it  comes  to  Itanium  2  servers,  no  one  has  more  experience  than  NEC.  NEC's  Express5800/1 000 
servers  use  Intel  CPU  technology  combined  with  NEC's  own  platform  to  create  the  fastest  32-way 
Itanium2  server  available.  With  the  advanced  processing  power  of  the  Itanium2  chip,  the 
Express5800/1 000  performs  up  to  30%  faster  than  most  RISC  servers,  yet  it's  about  one-third  of  the 
cost.  With  90%  of  the  leading  database  applications  available  for  Itanium  2,  the  Express5800/1 000 
will  also  dramatically  increase  the  performance  of  your  data  center.  NEC's  Express5800/1 000  delivers 
competitive  server  pricing,  high-speed  processing,  and  high  scalability  across  your  network. 


To  learn  more  about  NEC’s  Itanium  2  servers  and  download  the  free 
white  paper  go  to:  http://www.necsam.com/ia64-4  or  call  1.866.632.3226 


NLC  is  a  registered  trademark  of  NEC  Corporation  and  one/or  more  of  its  subsidiaries.  Microsoft  and  Windows 
are  registered  trademarks  of  Microsoft  Corporation.  Intel  and  Itanium  are  trademarks  or  registered  trademarks 
of  Intel  Corporation  in  the  U.S.  and/or  other  countries.  All  other  trademarks  and  registered  trademarks  are  the 
property  of  their  respective  owners.  1  '2004  NEC  Solutions  (America),  Inc.  All  Rights  Reserved. 
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1 00  people  download  dozens  of  them  simulta¬ 
neously.  Universities  that  cap  bandwidth  use  are 
finding  that  MP3  downloads  can  hog  up  to 
40  percent  of  network  bandwidth  at  peak  times. 
And  it’s  not  just  kids  doing  it.  A  May  2003 
Jupiter  Research  survey  of  2,835  consumers 
found  that  12.3  percent  of  all  1 8- to  24-year-olds 
(compared  with  4.5  percent  in  all  age  groups  in 
the  survey)  regularly  download  MP3s  at  work. 

Tools  like  Packeteer’s  PacketShaper  or  Allot 
Communication’s  NetReality  detect  when  fat 
files  are  causing  network  slowdown.  They 


examine  packets  as  they  move  from  the  local 
to  the  wide  area  network  and  classify  hundreds 
of  applications.  Companies  can  use  the  data 
collected  to  set  policies — for  example,  allotting 
half  of  all  bandwidth  to  Oracle  applications 
and  just  a  small  percentage  for  specific  file¬ 
sharing  applications.  Other  tools  made  by  ven¬ 
dors  including  Blue  Coat  Systems,  SurfControl 
or  Websense  help  filter  unwanted  applications. 
Evident  Software  takes  bandwidth  nuisance 


management  a  step  further:  It  lets  corporations 
track  in  dollars  which  corporate  departments 
consume  the  most  bandwidth.  Then  it’s  up  to 
the  company  to  decide  whether  departments 
will  be  charged  accordingly  for  their  usage. 

If  charging  bandwidth  hogs  doesn’t  work, 
CIOs  can  always  place  a  bandwidth  cap  on 
users  who  take  more  than  their  fair  share. 

LandAmerica  Financial  Group  did  this 
after  analyzing  bandwidth  use.  The  real  estate 
title  insurance  company  has  more  than  700 
offices  in  the  United  States  that  access  the 


Internet  through  data  centers  in  Richmond, 
Va.,  and  Dallas.  LandAmerica  initially  set  out 
to  use  Packeteer’s  network  appliance  to 
improve  performance  of  its  network,  which 
often  crawled  because  of  peer-to-peer  appli¬ 
cations  or  if  a  worker  simply  opened  a  20MB 
FTP  file.  Congestion  took  its  toll  on  critical 
applications  such  as  e-mail.  To  remedy  the 
problem,  LandAmerica  set  a  100K  band¬ 
width  limit  to  weed  out  heavy  use  of  file¬ 


sharing  applications — like  Gnutella  and 
Kazaa — and  file-sharing  on  instant  chat.  “Peo¬ 
ple  can  use  whatever  they  want  up  to  100K,” 
says  Matt  Matin,  a  systems  engineer.  Land¬ 
America  figures  it’s  avoiding  $500,000  in 
bandwidth  upgrade  costs  by  using  Packeteer 
for  application  filtering  and  data  compression. 

Others  handle  the  bandwidth  problem  dif¬ 
ferently.  At  Oklahoma  State  University, 
Michael  White,  the  university’s  interim  director 
of  telecommunications,  uses  NAT  (network 
address  translation)  to  deter  file-sharing.  NAT 
lets  him  set  up  network  nodes  so  that  many  end 
users  share  few  IP  addresses;  750  kids  in  a  dorm 
might  share  six  IP  addresses,  for  example.  That 
way,  the  outside  machine  seeking  to  copy  files 
can’t  easily  contact  an  individual  machine  in 
the  dorm.  However,  White  says  a  lot  of  the  peer- 
to-peer  software  is  able  to  query  the  network 
“super  node”  to  find  a  single  user.  He  concludes 
the  best  antidote  is  educating  students  to  set 
their  computers  so  that  they  aren’t  open  for  file- 
sharing  24/7.  “Most  students  just  want  to 
download  music,”  not  share  all  their  computer 
files,  he  says. 

INSTANT  CHAT  CAMPAIGN 

Instant  messaging  might  not  hog  as 

much  network  space  as  multiple  Lord  of  the 
Rings  downloads,  but  it  can  pose  problems. 
Aside  from  bandwidth  issues,  many  managers 
find  it  hard  to  track  the  panoply  of  LM  software 
versions  on  user  PCs.  (Microsoft,  Time 
Warner’s  America  Online  unit,  Yahoo,  IBM’s 
Lotus  division,  Sun  Microsystems  and  Oracle 
all  make  a  corporate  version  ofIM.)Just26  per¬ 
cent  of  organizations  have  standardized  on  a 
common  corporate  IM  application,  according 
to  market  researchers  at  The  Radicati  Group. 

Yet  IM  software  is  now  installed  within 
90  percent  of  all  corporate  networks,  accord¬ 
ing  to  research  firm  Osterman  Research. 
Often  it’s  used  by  employees  to  get  real  work 
done.  But  some  CIOs  view  it  as  a  bandwidth¬ 
sucking  productivity  blaster. 

“It’s  a  huge  problem,”  says  Richard  Ortiz, 
IT  manager  at  Palace  Entertainment,  which 
runs  water  and  amusement  parks.  Ortiz  says 
he  kept  noticing  strange  spikes  in  traffic  on  his 
frame  relay  routers  last  year.  So  he  used  net- 


SPAM  BATTLE  GEAR 

Six  suggestions  for  fighting  the  unsolicited  e-mail  menace 

-O  Write  it  down!  Send  a  policy  on  e-mail  use  to  every  employee.  Define  what’s 
appropriate  to  send  from  work.  Ban  the  forwarding  of  chain  e-mail. 

-0  Don’t  be  obvious.  Avoid  assigning  all  employees  obvious  e-mail  addresses 
such  as  name@company.com.  A  random  number  in  an  address  can  trip  up  spammers. 

-©  Use  a  filter.  Use  a  whitelist  or  verification  filter  like  DigiPortal  Software's  Choice- 
Mail,  a  tool  for  Microsoft  Windows,  or  TMDA  (tagged  messenger  delivery  agent),  an  open- 
source  tool.  A  whitelist  filter  makes  sure  that  mail  only  from  approved  recipients  makes  it  to 
the  inbox.  Other  messages  generate  a  challenge  that  is  returned  to  sender. 

~0  Know  the  rules.  Try  rules-based  spam  filtering  with  a  tool  like  SpamAssassin, 
which  evaluates  scores  of  e-mail  patterns  against  an  incoming  message.  If  an  incoming 
message  exceeds  a  minimum  score,  it's  bounced  as  spam. 

Be  demanding.  Make  it  policy  that  when  an  employee  uses  newsgroups,  signs 
up  for  newsletters  or  makes  online  purchases  that  they  use  a  personal  e-mail  address. 

Keep  your  staff  informed.  Tell  employees  to  never  respond  to  spam— even  if 
the  e-mail  asks  if  they  want  to  be  removed  from  their  list.  A  response  just  confirms  the 
accuracy  of  an  e-mail  address.  Teach  them  to  delete  e-mails  and  attachments  instead  of 
opening  or  forwarding  them.  Tell  them  to  never  send  personal  information  in  an  e-mail. 

SOURCES:  IBM.  Gnosis  Software.  Symantec.  Sophos 
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FREE  White  Paper! 

"Power  and  Cooling 
for  VoIP  and  IP 
Telephony  Applications" 

Just  mail  or  fax  this  completed 
coupon  or  contact  APC  for  your  FREE 
white  paper,  "Power  and  Cooling 
for  VoIP  and  IP  Telephony 
Applications."  Also  receive  our  FREE 
lnfraStruXure~  brochure.  Better  yet, 
order  both  today  at  the  APC  Web  site! 
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FREE  White  Paper  ”  Power  and  Cooling  for  VoIP 

and  IP  Telephony  Applications" 

□  YES!  Please  send  me  my  FREE  white  paper  and  InfraStruXure™  brochure. 

□  NO,  r  m  not  interested  at  this  time,  but  please  add  me  to  your  mailing  list. 

Name:  Title: 


Company: 

Address:  Address  2: 


City/Town: 


State: 


Zip: Country: 


Phone: 


Fax: 


E-mail: 


□ 


Yes!  Send  me  more  information  via  e-mail  and  sign  me  up  for  APC  PowerNews  e-mail  newsletter. 


Key  Code  p896y 


What  type  of  availability  solution  do  you  need? 

□  UPS:  0-1 6kVA  (Single-phase)  □  UPS:  10-80kVA  (3-phase  AC)  □  UPS:  80+  kVA  (3-phase  AC)  □  DC  Power 

□  Network  Enclosures  and  Racks  □  Precision  Air  Conditioning  □  Monitoring  and  Management  □  Cables/Wires 

□  Mobile  Protection  □  Surge  Protection  □  UPS  Upgrade  □  Don't  know 

Purchase  timeframe?  □  <  1  Month  □  1-3  Months  □  3-12  Months  □  1  Yr.  Plus  □  Don't  know 
You  are  (check  1):  □  Home/Home  Office  □  Business  (<1 000  employees)  □  Large  Corp.  (>1000  employees) 

□  Gov't.,  Education,  Public  Org.  □  APC  Sellers  &  Partners 


Legendary  Reliability1 


©2004  APC.  All  trademarks  are  the  property  of  their  owners.  ISX3A3EB-USd 


E-mail:  esupport@apcc.com 


132  Fairgrounds  Road,  West  Kingston,  Rl  02892  USA 


BUSINESS  REPLY  MAIL 

FIRST-CLASS  MAIL  PERMIT  NO.  36  WEST  KINGSTON,  Rl 
POSTAGE  WILL  BE  PAID  BY  ADDRESSEE 


AMERICAN  POWER  CONVERSION 


ATTENTION  CRC:  p896y 
Department:  B 
132  FAIRGROUNDS  ROAD 
PO  BOX  278 

WEST  KINGSTON  Rl  02892-9920 


NO  POSTAGE 
NECESSARY 
IF  MAILED 
IN  THE 

UNITED  STATES 


How  to 
Contact  APC 

Call:  (888)  289-APCC 

use  the  extension  on  the 
reverse  side 

Fax:(401)  788-2797 

Visit:  http://promo.  ape.  com 
use  the  key  code  on  the  reverse 
side 


Legendary  Reliability® 


O-UTTE^p 

-MTALlv 
'te/WF/AB,  c 


Problems? 


On-demand  architecture  for  network- 
critical  physical  infrastructure 
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InfraStru  ure 

POWER  RACK  COOLING 


From  system  downtime  to  cabling  messes, 
new  APC  InfraStruXure  solves  your  IT  problems 


You  no  longer  need  to  design  your  data  center  using  a  costly,  complicated 
approach.  Introducing  APC  InfraStruXure’",  on-demand  architecture  for  network- 
critical  physical  infrastructure  (NCPI).  Whether  you  are  designing  a  wiring  closet  or 
even  a  large  data  center,  InfraStruXure's  modular  archi¬ 
tecture  quickly  and  easily  solves  your  top  IT  problems. 

With  InfraStruXure;  you  can: 


Turn  System  Downtime  into 
SYSTEM  AVAILABILITY 

•  Rack  enclosures  provide  a  secure 
environment  for  all  IT  equipment 

•  Integrated  cooling  system  ensures 
optimal  equipment  performance 

•  Proactive  management 
of  the  system  prevents 
potential  problems 

•  Built-in  redundancy  means 

no  need  to  buy  a  second  UPS 


Turn  Complicated  Systems  into 
EASY-TO-USE  SOLUTIONS 

•  Vendor-neutral  racks  are  compatible 
with  equipment  from  all  major  vendors 

•  InfraStruXure' eliminates  the  need 
for  raised  floors  and  extensive 
engineering 

•  You  buy  only  what  you  need  now, 
with  the  option  to  easily  expand 

•  Configure-to-Order  process  ensures 
you  get  the  solution  that  is  right 
for  you 


To  find  out  more,  visit  us  today  at  www.apc.com 


Results  from  an  actual  InfraStruXure"  installation: 

>  Standardization  reduced  human  error  by  60%  * 

>  Equipment  and  management  costs 
reduced  by  20%  # 

>  Enhanced  security  and  systems  stabilization 

* Depending  on  the  installation,  individual  results  may  vary. 


We  wanted  an  upgradeable 
solution  that  could  scale  through 
changes  and  still  offer  us  long-term 
value.  InfraStruXure's  modular 
approach  makes  it  easy  to  upgrade 
anytime...  The  hot-swappable,  mod¬ 
ular  components  of  InfraStruXure 
make  maintenance  easy  and  cost  effective. 

-Vince  Pombo,  Vice  President  of  Engineering 
Rich  Flanders,  Director  of  Engineering 

Time  Warner  Cable 


FRFF  White  PaPer  on  “Power  and  Cooling  for  VoIP  and  IT 
*  ■•■-L  Telephony  Applications"  and  Free  InfraStruXure "Brochure 

Visit  httpy/promo.apc.com  Key  Code  p896y  •  Call  888-289-APCC  x3086  •  Fax  401-788-2797 
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IT  Security  Management 


PREEMPTIVE  STRIKES  IN  VIRUS  WAR 

Eight  tips  to  bolster  your  defenses 

Cover  all  bases.  Rememberto  update  antivirus  software  on  desktops  and 
servers  regularly.  More  than  500  viruses  crop  up  monthly.  Don’t  forget  remote  users. 
And  use  different  types  of  antivirus  software.  They  don’t  all  catch  everything. 

©  Surf  Secure.  Make  sure  employee  Web  browsers  are  at  the  right  security  level 
to  prevent  breaches. 

-©  Ship  it  out.  Consider  outsourcing  the  filtering  of  your  corporate  e-mail  to 
catch  spam  and  viruses  before  they  get  on  your  network. 

Publish  policies.  Tell  employees  to  never  open  e-mail  attachments  from 
people  they  don’t  know.  Some  viruses  spread  by  mailing  themselves  to  contacts  in 
an  infected  computer’s  address  book. 

-©  Get  alerts.  Subscribe  to  get  the  latest  virus  news  and  warnings  on  e-mail  at 
sites  like  McAfee  (dispatch. mcafee.com/us/default. asp)  and  Sophos 
(www.sophos.com/virusinfo/notifications). 

Grade  it.  Rank  applications  and  systems  according  to  how  critical  they  are  to 
your  business.  When  a  virus  hits,  determine  which  systems  are  most  important  to 
protect.  Rate  patches  so  that  all  IT  staffers  are  on  the  same  page:  A  low  rating  means 
patch  it  when  you  have  a  minute;  high  means  do  it  now. 

Assign  3  staff  member  to  take  charge  when  a  bad  virus  hits.  This  person 
leads  conference  calls  and  meetings,  and  coordinates  the  response  and  clean-up. 

BackUp!  Create  group  pages  among  IT  staff  to  use  as  a  backup  if  a  virus  takes 
the  company  e-mail  down. 

SOURCES:  Microsoft.  IBM,  McAfee,  Sophos,  PricewaterhouseCoopers,  CIO  reporting 


work  reports  to  hunt  down  the  culprit.  It  was 
IM.  “The  guys  are  worse  than  the  girls,”  says 
Ortiz.  “They  play  poker.  They’re  talking  to 
their  friends  about  the  football  game.”  In 
October  2003,  Ortiz  ended  the  fun,  installing 
Akonix  Systems  software,  which,  like  similar 
products  including  SurfControl’s  Instant  Mes¬ 
sage  Filter,  blocks  IM  use  and  helps  stop  end 
users  from  downloading  pirated  software  and 
peer-to-peer  file-sharing. 

Akonix  works  by  grabbing  packets  related 
to  the  application  and  blocking  them  from 
leaving  the  network.  It  also  tells  Ortiz  who  is 
trying  to  do  what.  “If  Mary  Jo  in  New  York  is 
downloading  illegal  software  from  Kazaa,  it 
runs  a  report.  She  gets  a  [pop  up]  message  that 
says  what  she’s  trying  to  do  isn’t  company  pol¬ 
icy  and  that  it  will  be  reported  to  a  manager,” 
Ortiz  says.  The  reports  are  working.  During 
the  first  week  of  using  Akonix,  60  people 
received  warning  notices  advising  them  that 
IM  was  no  longer  allowed.  “Now  we  barely 
have  10  or  five”  offenders  per  week,  he  says. 

OPERATION  AUTO  RESPOND 

For  the  worst  nuisances— e  -mail  main¬ 
tenance,  antivirus  updates  and  server  software 
upgrades — companies  are  finding  that  auto¬ 
mation  works  by  saving  time  and  labor.  For 
Ron  Rose,  CIO  of  Priceline.com,  the  biggest 
headache  used  to  be  the  hands-on  part  of  soft¬ 
ware  upgrades.  Priceline’s  business,  which 
allows  Web  users  to  haggle  the  prices  they  pay 
for  airfare,  hotel  rooms  and  other  services,  is 
powered  by  a  farm  of 300  Microsoft  Windows 
servers  that  require  between  100  and  200  soft¬ 
ware  changes  each  per  month,  Rose  says. 
“Before,  we  had  a  team  of  six  people  applying 
application  updates  on  a  machine-by-machine 
basis  to  each  of  the  servers,”  he  says.  “It  would 
take  up  to  an  hour  to  deploy  the  software  to  a 
small  group  of  the  servers  manually — every 
time  we  had  to  do  an  update.” 

Now,  Rose  uses  BladeLogic  to  consistently 
deploy  software  upgrades  to  not  only  Windows 
servers  but  to  the  company’s  Sun  Microsystems 
servers  too.  Others  providing  similar  data-center 
automation  offerings  include  IBM’s  Tivoli, 
CenterRun  (acquired  in  2003  by  Sun  Microsys¬ 
tems),  Moonlight  Systems  and  Opsware. 


Rose  figures  the  technology  has  made  a 
50  percent  increase  in  the  efficiency  of  techni¬ 
cians  doing  software  loading  by  eliminating  all 
the  hours  they  once  spent  manually  loading  soft¬ 
ware  onto  servers  and  debugging  machines  that 
were  misconfigured  during  that  manual  process. 

ALLIES  IN  THE  SPAM  WAR 

Other  nuisances — like  getting  employ¬ 
ees  to  delete  e-mail  regularly  or  to  quit  saving 
25  versions  of  the  same  Excel  spreadsheets  on 
their  hard  drives — are  harder  to  tackle.  But 
for  spam  and  virus  management,  more  CIOs 
are  looking  to  outsource  the  headache. 

Spam  now  makes  up  about  60  percent  of  all 
messages  pouring  into  corporate  e-mail  boxes. 
But  it’s  not  so  much  the  spam  that  strikes  fear  in 
the  heart  of  CIOs,  it’s  the  potential  viruses  lurk¬ 
ing  within  the  unwanted  messages,  says  Andy 
Toner,  a  partner  at  PricewaterhouseCoopers 
who  advises  clients  on  security  policy. 


The  average  company  shells  out  at  least 
$2.5  million  a  year  to  deal  with  spam — when 
you  add  up  productivity  lost,  bandwidth  and 
storage  consumption  and  support  costs,  accord¬ 
ing  to  server  software  maker  NetIQ.  Remedies 
range  from  simple  whitelists  and  blacklists  for 
filtering  approved  and  disapproved  mail,  to 
software  that  analyzes  the  algorithms  used  to 
write  e-mails.  Many  CIOs  are  using  an  army  of 
tools  to  tackle  spam,  including  CipherTrust’s 
IronMail,  Brightmail’s  Anti-Spam  Enterprise 
Edition  and  Postini’s  Perimeter  Manager. 

At  Daiwa  Securities  America,  Co-CIO 
Stephen  McCabe  outsources  e-mail  filtering 
to  MessageLabs,  which  uses  an  artificial  intel¬ 
ligence  tool  to  weed  out  viruses  and  spam 
from  incoming  e-mails.  Now,  when  Mes¬ 
sageLabs  finds  either  offender,  it’s  quaran¬ 
tined  for  further  review  and  McCabe  (rather 
than  the  end  user)  is  notified.  Filtering  e-mail 
offsite  before  it  enters  the  network  has  helped 
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Before  you  ask  us  to  change  your  copiers, 
printers,  scanners,  or  fax  machines,  we’d  like 
to  change  the  way  you  think  about  them. 

Call  IKON,  and  you  might  never  look  at  your  office  the  same  way  again.  Working  with  IKON,  you  may 
learn  that  the  addition,  elimination,  relocation,  or  replacement  of  equipment  can  make  your  business 
more  efficient.  Whether  it’s  financing  one  copier,  setting  up  a  high-volume  internal  copy  center,  or 
implementing  enterprise-wide  document  management  solutions,  whom  you  buy  from,  as  well  as 
who  services  and  supports  your  equipment,  are  key  issues.  And  as  the  world’s  largest  independent 
document  services  and  equipment  provider,  IKON  offers  product  lines  from  leading  manufac¬ 
turers  including  Canon,  Ricoh,  and  HP,  so  we  can  tailor  a  solution  that  addresses  all  of  your  needs. 

Copiers  Printers  Service  □  Outsourcing  □  Financing  □  1-888-ASK  IKON  □  WWW.IKON.COM 
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Document  Efficiency 
At  Work r 


To  te*** 
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These  four 
machines  could 
be  replaced  by 
one  multifunction 
copier/printer/ 
fax/scanner. 


IfcoH  c**v 


u^lce  be  vAOve 

visit" 


This  copier 
should  be 
downstairs. 


Sending  this  job 
to  your  copy 
center  downstairs 
could  have  saved 
12  hours. 
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solve  the  problem,  he  says;  they  haven’t  had  a 
bad  virus  in  more  than  two  years.  “When  a 
virus  hits  an  organization  of  our  size,  every¬ 
thing  stops,”  he  says.  “You  have  to  quaran¬ 
tine  and  clean  the  machines.  It  takes  a  day  to 
resolve.” 

Mary  Finlay,  deputy  CIO  of  Partners 
Healthcare  System  in  Boston,  says  she’s  con¬ 
sidering  outsourcing  virus  management 
because  it’s  become  just  too  much  of  a  nuisance. 
In  January  2003,  Slammer  attacked  a  vulnera¬ 
bility  in  Microsoft  SQL  2000  Web  servers.  For 
Finlay,  whose  company  is  largely  standardized 
on  Microsoft  servers,  Slammer  was  the  last 


they  don’t  want  to  filter  out  serious,  work- 
related  e-mail  in  the  process. 

Sean  Bagshaw,  CTO  of  Mortgage  Bankers 
Association  (MBA),  tackled  this  problem 
recently.  E-mail  the  company  sends  out — 
newsletters  and  other  information — is  often 
blocked  as  spam  because  some  of  MBA’s  bank¬ 
ing  members  include  the  word ; ;  mortgage  on  their 
e-mail  blacklists.  “You  are  constantly  fighting 
to  get  off  the  [black]  list,”  he  says. 

To  fix  the  problem,  Bagshaw  asks  member 
companies  to  add  MBA’s  e-mail  to  their  white- 
list.  But  Bagshaw  is  also  considering  joining  a 
Bonded  Sender  program  through  IronPort 


Preventing  nuisances  is  about  doing  many  things 
to  keep  the  headaches  from  becoming  nightmares^^^B 


straw.  She  realized  that  her  1,000  IT  workers 
weren’t  communicating  well  and  that  they 
should  be  handling  viruses — big  and  small — 
in  a  better  way.  “We  were  managing  each  virus 
as  it  came,”  says  Finlay,  whose  network  ferries 
crucial  information  on  everything  from  patient 
registration  to  lab  tests  to  medication  orders 
among  employees  at  10  hospitals.  That  virus- 
by-virus  approach — done  differently  within 
each  department — is  typical  at  big  corpora¬ 
tions  where  each  manager  wants  to  handle  the 
problem  in  his  own  way. 

But  that  method  made  the  company’s  net¬ 
work  vulnerable,  Finlay  says.  So  she  initiated 
a  system  to  keep  antivirus  software  consis¬ 
tently  up  to  date  on  both  Windows  NT  servers 
and  desktops  at  all  10  sites.  “Whenever  we’ve 
been  hit  since,  having  this  process  in  place 
makes  things  run  more  smooth ly,  ”  Fi n lay  says . 
Still,  she  says  she’s  looking  to  companies  such 
as  Symantec  for  help.  “It’s  very  labor-intensive 
and  confusing  to  gather  intelligence  around  an 
impending  virus,”  she  says. 

RECOGNIZING  FRIENDLY 
E-MAILS  AMONG  THE  FOES 

CIOs  face  a  quandary  when  they  get 
scrupulous  about  e-mail  filtering.  They  want 
to  keep  out  the  “Cheap  Viagra”  messages,  but 


Systems.  Bonded  Sender  uses  a  third  party  to 
certify  that  an  e-mail  sender  has  met  specific 
antispam  standards  and  has  put  up  cash  to 
back  that.  Under  the  system,  MBA  would  put 
up  a  bond  for,  say,  $50,000,  which  ensures  a 
marketing  campaign  is  not  spam.  A  debit 
from  the  bond  is  collected  if  the  third  party 
finds  MBA  in  violation.  About  1 8,000  organ¬ 
izations  participate  in  the  program. 

At  ABM,  the  building  services  contractor 
whose  CEO  was  hit  by  the  Blaster  virus,  a 
blacklist  mishap  last  year  prompted  a  policy 
change,  Finley  says. 

Blacklists  blocked  important  e-mail  com¬ 
ing  in  to  ABM  and  prevented  the  company 
from  sending  mail  to  its  customers.  Finley  says 
the  company  missed  a  sales  opportunity  last 
year  because  its  software  filtered  out  an  e-mail 
from  a  potential  customer  who  had  sent  a 
business  inquiry  to  the  sales  department  from 
a  home  address.  The  prospective  customer 
later  followed  up,  asking  why  no  one  from 
ABM  responded  to  the  e-mail.  (The  salesman, 
of  course,  never  got  the  e-mail,  Finley  says.) 
In  response,  ABM  hired  a  full-time  employee 
to  sift  through  thousands  of  filtered  spam  mes¬ 
sages  to  identify  spam  patterns  and  catch  legit¬ 
imate  e-mails. 

And,  Finley  says,  he  still  battles  the  ISPs  that 


have  kept  ABM  on  their  blacklists — an  unfor¬ 
tunate  side  effect  that  occurred  when  an  e-mail 
spoofer  rerouted  spam  e-mail  messages  through 
ABM’s  corporate  servers  so  it  appeared  that 
ABM  was  the  sender.  “We  have  to  call  and 
threaten  legal  action  and  say,  ‘You  better 
unblock  us,”’  he  says. 

USERS JOIN  THE  BATTLE 

To  gain  control  of  the  biggest  nuisances, 
IT  departments  need  to  stop  viewing  work¬ 
ers  as  the  enemy — and  start  recruiting  them 
to  be  part  of  the  solution. 

CIOs  who  send  out  e-mail  warnings  or 
updates  to  workers  are  fooling  themselves 
because  employees  “will  think  it’s  some  techy 
thing  that  they  don’t  have  to  worry  about,” 
says  Chris  Belthoff,  a  senior  security  analyst 
at  Sophos,  a  corporate  provider  of  antispam 
and  antivirus  solutions. 

Belthoff  advises  that  companies  create  a 
hands-on  training  program  with  employees  to 
educate  them  about  the  dangers  of  spam  and 
viruses.  He  says  it’s  critical  to  show  workers 
what  spam  e-mail  subject  lines  look  like  so  that 
they  recognize  them  in  their  inboxes.  Programs 
to  train  IT  workers  to  be  end  user  teachers  are 
available  from  Symantec,  among  others.  (For 
more  tips,  see  “Spam  Battle  Gear,”  Page  64.) 

Training  users  in  good  e-mail  hygiene  has 
been  part  of  the  thinking  at  Winstead  Sechrest 
&  Minick,  a  law  firm  with  approximately  720 
employees.  Director  Mark  Garrett  says  the  firm 
trains  all  new  employees  on  e-mail  and  Inter¬ 
net  use  policies  and  is  now  looking  to  add  train¬ 
ing  and  usage  policies  for  instant  messaging 
users.  The  law  firm  banned  IM  but  is  consid¬ 
ering  letting  Internet-reliant  lawyers  use  a  chat 
application  to  communicate  with  clients. 

There’s  no  way  to  get  rid  of  every  single  nui¬ 
sance.  There  will  always  be  one  employee  who 
can’t  resist  clicking  on  an  infected  attachment. 
Still,  prevention  stops  the  nuisance  from 
becoming  a  nightmare.  “It’s  about  the  little 
proactive  things,”  says  the  California  Inde¬ 
pendent  System  Operator  Corp.’s  CIO  Yee. 
“You  don’t  retrofit  as  an  afterthought.”  I3P1 


Kim  Girard  is  a  freelance  writer  based  in  San 
Francisco.  E-mail  feedback  to  letters@cio.com. 
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It’s  been  a  rough  few  years,  but  some  companies 
have  managed  to  thrive.  Why?  Because  their 
leaders  know  howto  steer  their  enterprises  out  of 
adversity.  Best-selling  author  and  turnaround  artist 
Amir  Hartman  tells  Lauren  Gibbons  Paul  how  you 
can  come  out  on  top. 


VIRTUALLY  NO  COMPANY  OR  INDUSTRY 
has  been  spared  during  the  brutal  economic  slump  of 
the  past  few  years.  With  a  recovery  seemingly  at 
hand,  it’s  tempting  to  breathe  a  sigh  of  relief  and  get 
back  to  business  as  usual. 

Bad  idea. 

All  companies  periodically  face  obstacles  in  both 
good  times  and  bad,  says  Amir  Hartman,  who’s  a 
consultant  and  cofounder  of  Mainstay  Partners,  pro¬ 
fessor  at  Berkeley’s  Haas  School  of  Business  and 
author  of  the  1999  best-seller  Net  Ready.  His  new 
book  is  Ruthless  Execution:  What  Business  Lead¬ 
ers  Do  When  Their  Companies  Hit  the  Wall  (Finan¬ 


cial  Times  Prentice  Hall,  2004).  In  it,  Hartman  says 
that  turnaround  starts  with  managers  (“benevolent 
dictators,”  he  calls  them)  who  ruthlessly  execute 
strategic  decisions  and  have  voracious  appetites  for 
change.  Leaders  who  are  always  satisfied  with  per¬ 
formance  become  complacent,  leading  to  stalled 
growth,  says  Hartman.  Equally  important  is  excel¬ 
lence  in  “operational  governance,”  the  formal  and 
informal  practices  and  rules  that  shape  how  deci¬ 
sions  get  made  and  work  gets  done  within  an  organ¬ 
ization.  CIO  contributor  Lauren  Gibbons  Paul 
asked  Hartman  how  the  principles  in  his  new  book 
apply  to  IT  organizations. 
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ator,  a  COO-type  CEO.  He  clearly  communi¬ 
cates  expectations.  Given  the  room  to  perform, 
if  results  aren’t  delivered,  he  looks  elsewhere. 
When  the  Honeywell- Allied  Signal  merger  was 
happening  [Bossidy  had  left  by  then],  Honey¬ 
well  lost  its  direction.  The  board  asked  Bossidy 
to  come  back  to  get  stakeholder  confidence 
back  up.  He  found  key  personnel.  He  com¬ 
mitted  to  Wall  Street  that  the  company  would 
become  profitable  and  drive  specific  working 
capital  reduction  targets.  That  commitment 
and  communication  translated  into  clear  direc¬ 
tives  to  the  management  team,  which  in  turn 
drove  very  specific  IT  investments  to  increase 
productivity  and  reduce  working  capital. 


What  do  ruthless  leaders  do  when  faced 
with  adversity? 

1’hey  recalibrate  their  strategies.  Recalibra¬ 
tion  is  a  fact-based  process  by  which  we  assess 
and  determine  which  strategy  we’re  going  to 
pursue.  Every  company  goes  through  that 
process,  but  not  every  company  does  it  in  a 
fact-based  manner. 


What  does  that  mean  for  a  CIO? 

From  an  IT  perspective,  strategy-setting  is  usu- 


CIO:  Can  you  expand  on  your  vision  of  a 
ruthless  leader?  What  characterizes  a 
benevolent  dictator? 

Amir  Hartman:  Focus  and  accountability. 
Those  are  the  key  themes.  These  folks  are 
relentless  about  focusing  on  initiatives  that  are 
going  to  drive  results  that  matter.  They  are  also 
very  keen  on  driving  accountability — deliver¬ 
ing  on  your  word  or  promises,  and  dealing 
with  the  consequences  when  one  doesn’t. 

When  I  think  of  accountability,  Larry 
Bossidy,  the  former  chairman  of  Honeywell 
and  Allied  Signal,  comes  to  mind.  He’s  an  oper- 


ally  not  fact-based.  Ruthless  companies  are 
fact-based.  They  find  out  exactly  where 
they’re  making  their  money.  The  process 
forces  a  clear  understanding  of  which  cus¬ 
tomers  and  businesses  are  profitable.  Most 
times,  IT  organizations  are  in  a  very  reactive 
mode.  They  should  shift  more  toward  fact- 
based  portfolio  management.  If  top-line 
growth  is  the  major  imperative,  they  need  to 


figure  out  how  to  reduce  the  dollars  spent  run¬ 
ning  the  business  systems  and  reallocate  some 
resources  toward  top-line  growth  initiatives. 

Portfolio  management  is  the  essence  of 
recalibration.  Every  company  has  a  portfolio, 
but  most  companies  don’t  understand  that 
they  have  a  portfolio.  Cisco  is  a  great  exam¬ 
ple  [of  being  fact-based).  Everyone  knows 
Cisco  was  a  young  company  that  was  in 


“CIOs  need  to  ask,  Where  are  my  IT 
dollars  going?  Are  they  focused  on  the 
right  areas?”  says  Amir  Hartman. 
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help,  it  will  also  allow  you  to  accomplish  more 
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SHARP  for  more  information. 
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•  Fully  integrated  network  ready  digital 
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.  be  sharp 
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hypergrowth  mode  until  2001.  All  of  a  sud¬ 
den  the  bottom  drops  out.  Where  they  had 
been  in  growth  and  acquisition  mode,  very 
swiftly  and  convincingly  Cisco  CEO  John 
Chambers  was  able  to  shift  the  strategy  to 
focus  on  things  that  more  mature  companies 
do,  such  as  cost  and  productivity  manage¬ 
ment.  They  look  at  things  in  a  very  fact-based 
way:  [Looking  at  our]  portfolio  of  initiatives, 
as  well  as  the  attention  and  resources  that 


prioritization  and  selection  of  IT  initiatives? 
most  CIOs  would  say  no.  A  good  CIO  needs 
to  be  able  to  drive  participation  because  IT  is, 
in  my  opinion,  a  business-driven  line  issue — 
or  it  should  be.  According  to  my  data,  less  than 
12  percent  of  companies  can  accurately  meas¬ 
ure  the  impact  of  their  IT  investments.  They’ll 
measure  things  like  percentage  of  projects  that 
were  completed  on  time  and  on  budget — 
that’s  a  classic  measure.  I’m  not  saying  that 


problem.  CEOs  and  CFOs  get  upset  about 
this,  and  rightfully  so. 

What  are  some  questions  to  ask  to  deter¬ 
mine  if  you— and  your  CEO— are  ruthless 
leaders? 

Almost  100  percent  of  the  questions  can  be 
applied  to  the  CIO  [see  “Are  You  Ruthless?” 
Page  76].  I  survey  the  top  50  executives  across 
the  organization.  I  say,  Let’s  look  at  your  prac- 


“VeryfewIT  organizations  are  coveringtheir  cost  of  capital,  but  they 
don’t  know  that  because  they  don’t  measure.” 


we’re  allocating,  is  this  an  optimal  portfolio? 

The  benevolent  dictator  part  comes  in 
around  operational  governance:  What  do  we 
measure?  [Operational  governance  is  about] 
roles,  responsibilities,  how  we’re  going  to  play 
the  game  and  make  decisions.  [Being  a  benev¬ 
olent  dictator  means  having]  a  very  clear,  fact- 
based  discussion  and  setting  of  expectations. 
This  is  positive  because  it’s  very  well-respected 
amongst  the  troops.  They  really  appreciate 
the  clear  setting  of  expectations.  These  prin¬ 
ciples  are  very  applicable  to  CIOs.  [Editor’s 
note:  Hartman  has  worked  at  Cisco.] 

How  can  a  CIO  aid  in  recalibration 
of  strategy? 

CIOs  have  a  lot  to  bring  to  the  table:  leader¬ 
ship,  portfolio  management  and  recalibrating 
the  strategy.  There’s  a  lot  the  CIO  can  do 
there — validating  the  direction  the  organiza¬ 
tion  is  taking  and  relentlessly  focusing  on  that 
direction.  Analyzing  and  assessing  whether  IT 
investments  are  being  optimized.  Are  we  allo¬ 
cating  those  in  the  right  way?  But  if  you  look 
at  IT  budgets  and  spending,  a  very  small  per¬ 
centage  of  the  spend  is  for  discretionary  ini¬ 
tiatives  that  create  value  for  the  organization. 

Most  investments  are  for  fixed  assets  that 
are  meant  to  run  the  business.  CIOs  need  to 
ask,  Where  are  my  IT  dollars  going?  Are  they 
focused  on  the  right  areas?  How  variable  are 
those  dollars? 

If  you  were  to  ask  most  CIOs,  Are  the 
senior-most  leaders  actively  involved  in  the 


blowing  away  the  budget  and  the  time  line  is 
a  good  thing,  but  it’s  not  necessarily  reflective 
of  the  [project’s]  strategic  impact.  Part  of  it  is 
very  context  specific.  Asset-intensive  indus¬ 
tries  such  as  manufacturing  tend  to  look  at 
return  on  net  assets.  In  other  industries,  the 
key  metrics  are  different.  The  IT  organization 
needs  to  play  a  significant  role  in  measuring 
the  key  metrics  for  its  industry.  I’m  not  satis¬ 
fied  with  the  answer  that  IT  investment  is  hard 
to  measure. 

What  about  post-hoc  measurement? 

Very  few  IT  organizations  are  covering  their 
cost  of  capital,  but  they  don’t  know  that 
because  they  don’t  measure.  It’s  a  very  prob¬ 
lematic  circle.  Here  are  some  facts:  In  a  500- 
company  survey  that  we  did,  less  than 
12  percent  of  large  companies  can  actually 
measure  the  value  of  their  IT  investments. 
Most  large  companies  (with  revenue  over 
$1  billion)  are  spending  50  percent  more  on 
IT  than  their  budgets  indicate.  Most  CIOs 
don’t  do  post-hoc  reviews  of  actual  spend. 
They  don’t  really  consider  total  cost  of  own¬ 
ership.  They  typically  look  only  at  the  initial 
investment  of  hardware,  software  and  instal¬ 
lation,  and  not  the  ongoing  investment.  From 
our  study,  in  the  case  of  big  automotive  com¬ 
panies,  their  actual  IT  spend  was  100  percent 
more  than  the  budget.  You’re  spending  a  lot 
more  than  you  think  you  are.  And  you  don’t 
have  much  of  an  idea  of  what  you’re  getting 
for  that  investment.  That  adds  up  to  a  major 


tices  versus  best-in-class,  and  let’s  see  the  gaps, 
and  let’s  focus  on  the  red  flags  that  are  really 
critical.  How  do  we  close  those  gaps?  [One 
could]  take  that  same  tool  and  apply  it  in  IT. 

Look  at  whether  your  organization  is  relent¬ 
less  about  ensuring  direct  linkage  of  initiatives 
to  strategic  imperatives.  Whether  your  senior 
leaders  are  actively  involved  in  the  prioritiza¬ 
tion  and  review  of  IT  initiatives.  Whether  your 
organization  has  a  tradition  of  discipline  and 
rigor.  Whether  you  kill  or  close  nonperforming 
initiatives  on  a  regular  basis.  Our  research  tells 
us  that  the  ruthless  companies  do  a  very  good 
j  ob  of  managing  talent.  They  also  can  identify 
and  get  rid  of  nonperformers. 

You  have  said  that  most  companies  have 
too  little  and  weak  operational  gover¬ 
nance— please  give  examples  of  both. 

Too  little — that’s  where  IT  decisions  get  made 
in  a  very  ad-hoc  fashion,  which  is  mostly  the 
case.  You’ll  have  a  strong  business  unit  leader, 
and  you’ll  make  investment  decisions  because 
that  leader  wants  it — not  because  it’s  good  for 
the  company  as  a  whole.  There  is  very  little 
process  around  selection  and  prioritization  of 
investments  and  very  little  post-hoc  review  of 
what  was  actually  accomplished  with  the 
investment.  Typically,  business  cases  are  weak. 
Ruthless  companies  are  much  more  disci¬ 
plined  about  the  process  for  investing.  If  you 
have  a  process  that  is  rigorous  and  fact-based, 
investment  decisions  can  be  made  a  lot  more 
intelligently. 


74  CIO  MARCH  15,  2004  •  www.cio.com 


You  take  your 
company's 
infrastructure 
security  seriously. 

So  do  we. 


Security  is  a  primary  concern  for  all  of  us.  That's  why  we've  developed  an  array  of  new  tools  and  guidance, 
centralized  at  microsoft.com/security/IT.  It's  a  resource  you  can  turn  to  for  timely  news,  education,  and  tools, 
all  intended  to  help  you  better  plan  and  manage  the  security  strategy  that's  right  for  your  company. 


Take  advantage  of  the  latest  tools  and  training  at  microsoft.com/security/IT. 


Free  Security  Training 

Register  for  free  security  management  training, 
including  a  Security  Summit  in  a  city  near  you,  weekly 
security  Webcasts,  and  in-depth  e-learning  designed 
to  help  you  improve  your  security  infrastructure. 

Free  Tools  and  Updates 

Streamline  patch  management  with  free  tools 
such  as  Microsoft®  Software  Update  Services. 
Download  software  like  Microsoft  Baseline  Security 
Analyzer  to  verify  that  your  systems  are  configured 
to  maximize  security. 


Free  Emergency  Notifications 
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Q&A  |  Amir  Hartman 

[As  for  too  much  corporate  governance,] 
the  analog  to  that  is  where  there  is  too  much 
bureaucracy.  So  any  size  of  investment  goes 
through  the  same  justification  and  review 
process  whether  the  initiative  is  a  large  ERP 
implementation  that  will  cost  a  couple  of  mil¬ 
lion  dollars  versus  a  very  small  enhancement. 

To  apply  this  portfolio  framework  to  IT, 
you’ve  got  in  essence  four  buckets,  driven  by 
two  key  variables:  business  criticality,  and 
newness  or  innovation.  The  four  buckets  are 
projects  that  are:  fundamental  or  necessary 
for  running  the  business,  those  that  aim  to 
innovate  the  business,  those  that  aim  to  grow 
the  business,  and  rational  experiments.  Invest¬ 
ments  that  aim  to  innovate  the  business — and 
have  a  much  longer  payback  period — and 
rational  experiments  need  to  be  treated  very 
differently.  Rational  experiments  have  a  much 
longer  payback,  higher  risk,  and  they’re  more 
uncertain.  Looking  at  it  from  an  ROI  per¬ 
spective  is  counterproductive.  These  different 
kinds  of  investments  need  to  be  f  unded,  meas¬ 
ured  and  managed  differently. 

You  discuss  metrics  a  lot.  You  say  compa¬ 
nies— and  CIOs— typically  measure  the 
wrong  thing.  Shouldn’t  they  be  measuring 
business  results? 

They  should,  but  they  typically  don’t.  The  clas¬ 
sic  reason  for  that  is  that  it’s  very  difficult  to 
measure  the  efficacy  of  IT  investments.  It’s  true, 
in  part,  because  more  and  more,  it’s  hard  to 
delineate  where  IT  starts  and  stops,  and  where 
processes  start  and  stop.  It  will  be  even  more  dif¬ 
ficult  moving  forward.  [There  is  some  holdover 
of  the]  cost-center  mentality  baggage.  So  CIOs 
tend  to  get  away  with  not  measuring  things  that 
truly  matter.  Moving  forward,  a  strong  CIO 
needs  to  be  able  to  show  a  linkage  between  IT 
investments  and  what  IT  does  for  the  business. 
Not  every  IT  investment  creates  value.  Infra¬ 
structure  investments  are  never  going  to  have 
ROI.  They  are  part  of  the  cost  of  doing  business. 
But  that  doesn’t  mean  we  throw  up  our  hands 
and  say  we  can’t  measure  it. 

CIOs  will  do  a  lot  of  good  by  driving  toward 
measures  that  the  business  cares  about — the 
CEO,  the  CFO,  the  board  and  the  sharehold¬ 
ers.  IT  can  play  a  strong  partnership  role  in 


helping  to  bring  a  lot  of  information  about  the 
cost  side.  Here’s  what  we  actually  spent,  total 
cost  of  ownership  for  this  investment.  They 
need  to  partner  with  the  business  unit  lead  to 
bring  visibility  and  clarity  as  to  what  these 
investments  are  providing  to  the  company. 

There  is  a  reticence  on  the  other  side  of  the 
fence:  Business  leaders  typically  don’t  believe 
they  should  be  held  accountable  for  IT  invest¬ 
ments.  The  education  needs  to  happen  on 
both  sides.  A  lot  of  top  organizations  that  I 
have  studied  do  [hold  their  business  units 
accountable  for  IT  investments] .  It  will  get  on 
the  agenda  of  leaders  even  more  so  because  I 
would  wager  that  by  the  end  of  this  year,  about 
a  third  of  companies  will  subject  their  IT 
investments  to  a  board  approval  process. 

What  percent  of  companies  are  ruthless, 
by  your  definition? 

I  studied  about  500  companies  over  a  30-year 
time  span:  It’s  less  than  1 0  percent.  And  that’s 
being  generous.  The  ones  that  are  more  ruth¬ 
less  get  better  results  from  their  IT  invest¬ 
ments,  they  have  a  better  ROI  on  capital  than 
their  peer  group,  and  they  have  a  better  rela- 


Talk  to  Amir  Hartman 


The  author  of  Ruthless  Execution:  f"”*'’" 

What  Business  Leaders  Do  When  Their^^^^M 
Companies  Hit  the  Wall  lays  out  the 
basics  of  being  a  benevolent  dictator  (such  as 
focus  and  accountability).  If  you  want  to  know 
more  about  Hartman's  fact-based  approach  to 
leading  and  decision  making,  you  can  ASK 
THE  SOURCE.  Submit  your  questions  to  Hart¬ 
man  online  through  March  31.  Go  to 
www.cio.com/experts. 

cio.com 

tive  market  cap  growth  and  relative  market 
share  growth.  But  if  you  take  any  1 0-year  time 
span  and  flip  it,  you’ll  see  that  less  than  one  in 
10  companies  can  sustain  profitable  growth 
over  that  10-year  period. 

Economic  conditions  seem  to  be  improv¬ 
ing.  Can  CIOs  relax  a  little? 

We’re  definitely  coming  out  of  the  trough.  I’m 
starting  to  see  the  capital  belt  loosen  up  j  ust  a 
tad.  But  I’m  also  seeing  much  more  down¬ 
ward  pressure  to  rationalize  IT  investments, 
much  more  scrutiny,  faster  payback.  IT 
organizations  cannot  breathe  a  sigh  of  relief. 
There’s  actually  more  pressure  that  will  be  put 
upon  them. 


Are  You  Ruthless? 


1.  Do  you  clearly  understand  which  customers  are  the  most  profitable  and  why? 


2.  Does  your  company  effectively  balance  between  short-term  performance  and 
long-term  growth  investments? 


3.  Is  your  company  relentless  about  ensuring  a  direct  linkage  of  initiatives  to 
strategic  imperatives? 


4.  Are  you  relentless  about  linking  incentives  to  results  rather  than  activities? 


5.  Do  you  have  a  proactive  and  disciplined  approach  to  assessing  value  and 
identifying  potential  acquisitions  and  timely  divestitures? 


6.  Does  your  company  have  a  culture  of  discipline? 


7.  Do  you  effectively  analyze  and  prioritize  initiatives  and  investments? 


8.  Does  your  company  have  a  planning  and  review  rhythm  (quarterly  reviews)? 


9.  Do  you  enforce  accountability  for  deliverables?  Are  the  consequences  real? 


10.  Do  you  have  deep  succession  plans? 

SOURCE:  Ruthless  Execution:  What  Business  Leaders  Do  When  Their  Companies  Hit  the  Wall 
(Financial  Times  Prentice  Hall,  2004) 
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Case  Files  Deseret’s  Project  Prioritization 


VALUE  SYSTEMS 
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Deseret  Book 

PRINCIPAL  BUSINESS 

Book  publisher,  distributor  and 
retailer 

HEADQUARTERS 

Salt  Lake  City 

USERS 

1,000 

URL 

www.deseretbook.com 


First  Things 
First 


VALUE  SYSTEM 

Deseret  Book's  legacy  systems  were 
encoded  with  processes  that  no 
longer  matched  the  way  the  com¬ 
pany  worked.  To  make  the  most 
effective  decisions  about  refining  its 
processes  and  to  generate  the 
greatest  degree  of  value  from 
upgrading  its  systems,  the  company 
applied  a  decision-making  model 
developed  by  its  new  CIO. 


THE  PLAYERS 

NIEL  NICKOLAISEN 

CIO 

SHERI  DEW 

CEO 

JEFF  YATES 

VP  and  CFO 


CASE  ANALYST 

GOPALK.  KAPUR 

President,  Center  for  Project 
Management 


Using  a  prioritization  system  that  classifies  projects  by  the  value 
they  bring  to  the  business  ensures  that  Deseret  Book  steers  the 
right  amount  of  resources  to  the  right  projects 

BY  LAFE  LOW 


AFTER  YEARS  IN  I.T.,  Niel  Nickolaisen  believes 
IT  projects  fail  in  such  high  percentages  because 
both  IT  and  business  executives  spend  too  much 
time  and  energy  debating  systems  that  ultimately 
don’t  generate  a  single  dollar  of  ROI  or  the 
slightest  increase  in  market  share.  And  then  they 
devote  too  many  resources  to  developing  tech¬ 
nology  to  support  those  projects. 

Nickolaisen  joined  Deseret  Book,  a  book  pub¬ 
lisher,  distributor  and  retailer  based  in  Salt  Lake 
City,  as  its  first  ever  CIO  in  March  2003.  He 
found  an  IT  department  in  chaos.  “They  had  a 
highly  customized  homegrown  system.  The  IT 
development  staff  spent  its  time  responding  to 
every  imaginable  request,”  Nickolaisen  says. 
“They  didn’t  have  a  CIO,  IT  reported  to  finance, 
and  there  were  business  processes  embedded  in 
their  legacy  systems  that  actually  got  in  the  way 
of  people  getting  things  done.”  So  Nickolaisen, 
who  was  then  a  business  turnaround  specialist  at 


a  venture  capital  firm,  was  brought  in  to  over¬ 
haul  Deseret  Book’s  20-year-old  technology 
infrastructure  and  bring  order  to  a  random  IT 
project  prioritization  process. 

The  goals  of  his  approach  are  to  help  Deseret 
Book  make  more  effective  IT  project  decisions 
and  to  bring  a  sharper  focus  and  rigid  analysis  to 
IT  project  decision  making.  This  method  helps 
Nickolaisen  and  his  executive  colleagues  iden¬ 
tify  business  priorities  around  each  decision  and 
allocate  the  appropriate  amount  of  resources — 
staffing,  capital  investment  and  time — to  each 
project.  By  prioritizing  and  classifying  these  deci¬ 
sions,  the  CIO  and  business  unit  leaders  can 
examine  them  more  objectively.  They  avoid 
squandering  intellectual  and  financial  capital  on 
processes  that,  while  important  to  the  business, 
would  not  help  the  company  generate  additional 
revenue  or  secure  greater  market  share. 

Using  this  mode  of  classifying  projects  has 
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yielded  tangible  benefits,  according  to  Nick¬ 
olaisen  and  has  greatly  simplified  the  com¬ 
pany’s  project  strategy.  He  estimates  that 
using  this  decision  model  has  reduced  IT 
project  time  lines,  costs  and  resource 
requirements  by  40  percent  to  70  percent. 

REWRITING  THE  RULES 

One  of  the  first  major  processes  that  Nick¬ 
olaisen  classified  with  his  model  was  a  proj¬ 
ect  overhauling  the  Deseret  Book  system  for 
shipping  customer  orders.  The  rules  the 
company  had  encoded  into  its  legacy  systems 
for  shipping  products  exemplifies  the  ad  hoc 


manner  in  which  the  company  had  histori¬ 
cally  made  IT  and  process  decisions.  Besides 
its  36  retail  stores  in  the  western  United 
States,  Deseret  Book  sells  directly  to  cus¬ 
tomers  through  three  channels:  catalog 
orders,  Internet  orders  and  its  book  club. 
Since  those  three  channels  evolved  at  differ¬ 
ent  times,  each  channel  used  different  ship¬ 
ping  rules  and  fees. 

That  resulted  in  doing  extra  work  when 
processing  orders  and  calculating  shipping 
rates  that  simply  didn’t  make  sense,  says 
Nickolaisen.  So  the  company  decided  to 
apply  a  single  shipping  rule  to  all  orders 


By  using  a  project  classification  model  that 
prioritizes  processes  and  resources,  Deseret 
Book  CIO  Niel  Nickolaisen  has  reduced  IT 
project  time  lines,  costs  and  resource  require¬ 
ments  by  40  percent  to  70  percent. 

regardless  of  channel,  but  which  one  should 
it  use?  Shipping  products  to  customers  is 
clearly  a  critical  process  for  the  continued  suc¬ 
cess  of  Deseret  Book;  however,  it  does  not  set 
the  company  apart  in  the  market.  The  man¬ 
ner  in  which  products  are  shipped  to  cus¬ 
tomers,  as  long  as  it  lives  up  to  market  best 
practices,  will  not  win  additional  customers 
or  increase  market  share,  says  Nickolaisen. 
The  goal  for  the  shipping  process  therefore 
was  to  be  at  market  parity.  “We  don’t  have  to 
be  better  than  everyone  else,”  he  says.  “We 
just  can’t  be  worse.” 

Filtering  that  decision  through  Nick¬ 
olaisen’s  model  helped  Deseret  Book  execu¬ 
tives  realize  that  how  they  ship  products 
doesn’t  need  to  be  unique.  It  also  helped  them 
decide  on  a  single  shipping  process — flat  fees 
for  standard  and  priority  shipping — in  just 
15  minutes.  They  didn’t  waste  time  agonizing 
over  a  process  that  wouldn’t  gain  the  com¬ 
pany  any  additional  revenue  or  market  share, 
and  they  were  able  to  streamline  how  they 
ship  products. 

The  new  shipping  rules  were  then 
encoded  into  the  Oracle  ERP  system  that  is 
replacing  Deseret  Book’s  legacy  systems. 
“All  of  the  ‘experts’  we  brought  in  told  me 
it  would  take  three  years  to  implement  the 
new  system  at  a  cost  of  $3  million  to  $5  mil¬ 
lion,”  says  Sheri  Dew,  Deseret  Book’s  CEO. 
“I  also  heard  for  years  that  our  company 
was  so  unique  that  it  demanded  a  unique 
system.  Niel  came  in  and  in  a  matter  of  days 
completely  dashed  those  assumptions.”  This 
month,  Deseret  Book  will  complete  imple¬ 
mentation  of  its  Oracle  ERP  system,  plus  a 
new  point-of-sale  system  in  its  retail  stores. 
Implementation  will  have  taken  less  than  a 
year  at  roughly  half  of  the  previously  esti¬ 
mated  cost. 
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DON’T  FORGET  METRICS 

BY  GOPAL  K.  KAPUR 

IT  IS  ENCOURAGING  to  see  a  CIO  who  takes  the  lead  in 
focusing  on  projects  that  will  bring  value  to  the  organiza¬ 
tion  and  improve  its  bottom  line.  Close  to  70  percent  of  IT 
projects  fall  in  the  failed  or  challenged  category— the  latter 
meaning  the  projects  were  delivered  but  did  not  produce 
the  promised  value  for  the  customer.  Two  common  reasons 
projects  fail  are  a  poorly  defined  organizational  strategy 
and  the  lack  of  a  well-designed  process  to  filter  out  low- 
value  projects. 

Keeping  this  in  view,  my  suggestion  to  Deseret  Book  CIO 
Niel  Nickolaisen  is  to  ensure  that  mission-critical  project 
classification  is  tied  to  specific  quantified  strategy  met¬ 
rics— for  example,  to  obtain  25  percent  additional  market 
share  by  December  2004  at  an  investment  of  no  more  than  $2  million.  Without 
this,  the  mission-critical  definition  will  revolve  around  people’s  wishful  thinking, 
a  definite  path  to  failed  and  challenged  projects.  The  same  goes  for  the  market- 
differentiating  definition. 

Another  key  factor  Nickolaisen  must  include  in  his  simplified  decision  process  is 
the  risk  exposure  of  each  proposed  project.  Often  projects  get  approved  without  the 
risk  being  fully  evaluated.  For  example,  if  the  IT  group  started  four  projects  designed 
to  gain  that  25  percent  market  share  and  assumed  the  project  failure  rate  is  50  per¬ 
cent,  its  ability  to  succeed  is  fairly  slim.  It  would  behoove  them  to  plan  for  a  higher 
percentage  gain  to  be  able  to  meet  the  desired  25  percent  mark.  Nickolaisen  is  tak¬ 
ing  a  step  in  the  right  direction  to  simplify  the  decision-making  process.  Now  he 
needs  to  make  sure  the  process  is  comprehensive  and  robust. 


Gopal  Kapur  is 
president  of  the  Center 
for  Project  Management. 
Send  him  e-mail  at 
gkapur@center4pm.com. 
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DECISIONS 
MADE  SIMPLE 

Nickolaisen  developed  this  decision-making 
model  based  on  his  experiences  at  previous 
companies  and  conversations  with  numer¬ 
ous  CIO  colleagues.  He  found  that  the  value 
generated  by  most  IT  projects  was  often 
greatly  reduced  because  they  grew  overly 
complicated  and  then  exceeded  their  origi¬ 
nal  budgets  and  schedules. 

When  Nickolaisen  was  the  CIO  at 
Franklin  Covey,  a  publisher  of  planning 
materials  also  based  in  Salt  Lake  City,  the 
business  unit  leaders  wanted  to  change  the 
order  of  certain  data-entry  fields  to  record 
customers’  telephone  numbers  before  their 
addresses.  So  Nickolaisen  started  the  ERP 
customization  project,  which  proved  costly 
and  time-consuming. 

He  realized  the  time  and  effort  spent  cus¬ 
tomizing  the  order-entry  screens  to  change 
the  order  of  data  input  did  nothing  to  help 
acquire  additional  customers  or  even 
improve  customer  service.  It  cost  $100,000 
and  was,  in  his  view,  a  waste  of  the  com¬ 
pany’s  time  and  resources. 

So  Nickolaisen’s  goal  in  developing  this 
decision-making  framework  was  to  bring 
sharper  focus  to  the  IT  project  process.  He 
believes  projects  can  generate  the  greatest 
value  when  no  time  or  energy  is  wasted 
developing  unique  and  innovative  systems 
if  their  intent  is  simply  to  match  industry 
best  practices.  Examples  of  these  types  of 
systems  include  how  a  company  ships  prod¬ 
ucts,  generates  invoices  and  maintains  its 
general  ledger.  These  processes  must  be  done 
well,  but  they  don’t  need  to  be  distinctive. 

This  appropriate  use  of  resources  helps 
projects  generate  value.  “Time  and  cost  sav¬ 
ings  are  large  when  you  consider  the 
amount  of  capital  wasted  on  nonmission- 
critical  projects  or  projects  that  do  not 
improve  the  organization’s  value  proposi¬ 
tion  in  the  marketplace,”  says  Jeff  Yates, 
Deseret  Book’s  vice  president  and  CFO. 

Since  developing  this  model  and  applying 
it  to  every  IT  project  decision  with  which  he 
has  been  involved,  Nickolaisen  says,  he  has 
not  had  a  single  failed  project. 


THE  PROJECT  TYPES 

Nickolaisen’s  model  places  a  project  in  four 
general  categories  based  on  whether  it  pro¬ 
vides  an  outcome  that  is  imperative  and 
whether  it  will  make  the  company  stand  out 
in  the  marketplace.  Depending  on  how  each 
system  fits  into  both  those  criteria,  they  are 
classified  as  Type  1  through  Type  4. 

1  Mission-Critical:  Yes 
Differentiating:  Yes 

Type  1  processes  are  mission-critical  and  they 
differentiate  a  company  within  the  market¬ 
place.  This  means  performing  these  functions 
is  essential  for  the  company  to  remain  in 
business.  They  also  help  facilitate  a  unique 
service  or  product  that  the  company  needs 
to  remain  competitive.  Product  research  and 


development  is  one  example  of  this  type  of 
process.  For  Nickolaisen  and  Deseret  Book, 
it  is  the  ability  to  determine  and  fulfill  needs 
within  their  publishing  market  that  give  them 
an  edge  over  their  competition. 

2  Mission-Critical:  Yes 
Differentiating:  No 

Type  2  processes  are  mission-critical.  They 
have  to  be  done  well  or  the  business  is  at 
risk.  They  do  not  differentiate  a  company 
within  the  marketplace,  however.  Examples 
of  these  types  of  processes  include  billing, 
shipping  products  and  maintaining  finances. 
These  are  all  necessary  for  the  company’s 
success,  but  investing  heavily  in  inventive 
ways  to  generate  invoices  or  balance  the 
company  finances  will  not  gain  customers  or 
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increase  market  share,  even  though  both  of 
those  tasks  are  indeed  vital. 

The  mechanics  of  purchasing  and  distrib¬ 
uting  the  third-party  titles  Deseret  Book  sells 
in  its  retail  stores  and  processing  invoices  for 
those  purchases  do  not  need  to  be  unique  or 
exceptional  and  are  therefore  other  exam¬ 
ples  of  Type  2  processes.  When  Nickolaisen 
arrived  at  Deseret  Book,  there  was  a  convo¬ 
luted  process  for  setting  up  suppliers,  making 
purchases,  and  processing  invoices  and 
returns.  Once  the  management  team,  retail 
buyers  and  finance  agreed  that  purchasing 
was  a  Type  2  process,  Nickolaisen  says,  they 
were  able  to  reengineer  the  process  in  about 
15  minutes. 

3  Mission-Critical:  No 
Differentiating:  Yes 

Type  3  processes  are  not  essential,  but  they 
can  provide  competitive  advantage  by  dif¬ 
ferentiating  the  company.  Such  projects 
include  partnerships  or  collaborations  where 
each  company  focuses  on  its  core  strength, 
yet  the  combined  result  is  more  than  either 
could  accomplish  individually. 

4  Mission-Critical:  No 
Differentiating:  No 

Type  4  processes  are  the  least  critical  to  the 
business.  They  can  be  important,  but  if  inter¬ 
rupted  somehow,  the  business  would  sur¬ 
vive.  These  processes,  such  as  cleaning  and 
maintaining  office  space,  typically  do  not 
benefit  from  IT  investments. 

THE  MODEL  AT  WORK 

When  making  IT  project  decisions  at  Deseret 
Book,  a  business  unit  sponsor  first  identifies 
a  business  need.  Nickolaisen  and  his  IT  staff 
then  work  with  the  business  sponsor  to 
quantify  that  need.  This  is  when  IT  and  busi¬ 
ness  filter  the  project  through  Nickolaisen’s 
model.  Once  they  have  classified  the  project 
components  as  mission-critical,  differentiat¬ 
ing  or  both,  IT  and  the  business  leaders  can 
build  an  appropriately  weighted  business 
case  for  the  project. 

Once  the  project  and  process  types  are 
classified  with  the  costs  and  benefits  speci¬ 


fied,  both  IT  and  the  business  unit  leader 
present  the  project  proposal  to  the  IT  steer¬ 
ing  committee,  which  includes  the  executive 
management  team,  for  approval. 

Nickolaisen  contends  that  most  processes 
are  Type  2:  mission-critical  but  not  differen¬ 


Book’s  legacy  financial  systems  with  Oracle 
ERP,  Nickolaisen  had  to  reassure  his  CFO 
and  other  executives  of  the  importance  of 
processes  like  maintaining  the  general  ledger. 
“Do  our  financials  matter?  Yes,  but  do  you 
go  out  to  a  customer  and  say,  ‘You  should 


By  classifying  decisions  about  business  priorities, 
both  the  CIO  and  business  unit  leaders  can 
examine  projects  more  objectively. 


tiating.  When  CIOs  and  their  colleagues  in 
finance  and  business  leadership  understand 
this  concept,  they  can  help  save  the  money 
and  effort  that  is  better  spent  on  the  more 
significant  and  demanding  Type  1  projects. 

“You  really  should  be  spending  your 
brainpower  thinking  about  that  10  to  20 
percent  of  things  that  are  Type  1,”  Nicko¬ 
laisen  says.  For  Deseret  Book,  product  devel¬ 
opment  and  product  selection  are  the  most 
significant  processes  that  are  both  mission- 
critical  and  differentiating.  “We  have  to  do 
them  better  than  our  competitors,”  Nicko¬ 
laisen  says. 

COMMUNICATE  AND 
REASSURE 

One  of  the  most  critical  factors  to  success¬ 
fully  applying  this  model  to  IT  project  deci¬ 
sions  is  to  thoroughly  communicate  the 
importance  of  Type  2  processes  to  their 
respective  business  unit  owners.  Just  because 
they  are  not  unique  does  not  mean  they  are 
less  important,  says  Nickolaisen. 

He  says  that  process  owners  may  take  it 
personally  when  they  hear  that  a  project  does 
not  create  a  competitive  advantage,  even 
though  it  is  still  important  to  the  well-being 
of  the  enterprise.  Reassuring  executives  of 
the  importance  of  those  critical  functions 
keeps  them  thinking  within  the  parameters 
of  this  model  and  prevents  them  from  insist¬ 
ing  on  allocating  excessive  resources  to  a 
project  that  won’t  differentiate  a  company 
in  its  industry. 

When  he  used  his  model  to  classify  the 
processes  related  to  upgrading  Deseret 


see  our  general  ledger  design?”’  Nickolaisen 
says.  Any  process  that  is  not  customer-facing 
is  most  likely  a  Type  2,  he  adds. 

A  CIO  needs  to  establish  credibility  with 
the  business  leaders  to  get  them  to  comfort¬ 
ably  consider  decisions  within  this  framework 
and  to  see  it  for  the  objective  assessment  that 
it  is.  “You  have  to  be  able  to  make  the  case 
that  it’s  really  about  optimizing  business 
value  and  not  easing  the  CIO’s  workload,” 
Nickolaisen  says. 

The  two  most  important  relationships  the 
CIO  has  in  working  through  this  process  are 
with  the  CEO  and  the  CFO.  “Implementing 
[this  model]  is  improving  our  communica¬ 
tion  with  IT  in  every  respect,”  says  Dew.  “It 
is  streamlining  essentially  all  of  the  processes 
related  to  IT  as  well  as  supply  chain  man¬ 
agement.  We  are  refining  our  internal 
processes,  and  the  result  is  savings  in  over¬ 
head  dollars,  personnel  and  time.” 

Nickolaisen  says  his  model  has  saved 
Deseret  Book  in  implementation  costs  and 
overhead,  and  made  the  decision-making 
process  more  efficient.  He  has  found  that 
prioritizing  and  allocating  the  right  resources 
generates  value.  HH 


Send  your  value  stories  to  Special  Projects  Editor 
Mindy  Blodgett  at  mblodgett@cio.com. 


Learn  More  About  Project  Prioritization 


For  another  case  study  (with  analysis)  on 
PROJECT  VALUATION,  see  "Project  Triage," 
which  describes  the  process  used  by  the 
Visiting  Nurse  Services  of  New  York.  Find  it 
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Porterfield  used  to  waste  a  lot  of 
expensive  ceramic  piping  when  build¬ 
ing  coal  prep  plants.  “If  one  elbow  is 
wrong,  you  might  end  up  having  to  rip 
out  a  whole  line,”  he  says.  Now  a  3-D 
CAD  tool  generates  designs  that  are 


Project  Management 


Long  a  technology  laggard,  the  $3  trillion  world¬ 
wide  construction  industry  is  beginning  to  use  IT 
to  manage  increasingly  complicated  projects— 
and  learning  useful  lessons  about  the  character 
and  challenges  of  complexity  itself  by  fred  hapgood 

Guys  in  this  business  are  guys  who  like  to  build  things,”  says  Steve  Setzer,  spokes¬ 
man  for  Constructware,  an  application  service  provider  that  supplies  management 
support  services  to  the  construction  sector.  "They  don’t  like  paperwork."  *  Or,  until 
recently,  computers,  *  Setzer  is  struggling  to  untangle  a  paradox:  IT  is  about  manag¬ 
ing  complexity,  and  the  average  construction  project  is  a  sink  of  complexity.  Gargan¬ 
tuan  construction  projects  are  veritable  swamps.  Yet  the  construction  industry  has  tended  to  be  a 
lagging  adopter  of  IT.  “Until  recently,  construction  IT  usually  reported  to  the  CFO  because  the  only  infor¬ 
mation  technology  in  the  business  was  that  supporting  accounting,”  says  Mark  Napier,  a  vice  president 
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and  systems  manager  at  Bovis  Lend  Lease,  the 
London-based  construction  giant  currently 
building  the  AOL  Time  Warner  tower  in  New 
York  City  (among  other  projects). 

Instead  of  a  consensus  as  to  what  has  inhib¬ 
ited  the  spread  of  IT  within  the  construction 
industry,  there’s  speculation.  “Contractors  see 
their  business  as  living  from  project  to  proj¬ 
ect,”  suggests  Joel  Koppelman,  CEO  of  Pri- 
mavera,  a  project  management  software 
company.  “That  [short-term]  view  might 
make  them  reluctant  to  add  [continuing]  over¬ 
head  expenses,  like  an  IT  staff.” 

No  doubt  the  high  stakes  in  construction — 
in  terms  of  dollars  and  even  lives — could  lead 
to  a  reluctance  to  adopt  new  technologies. 
(Tort  lawyers,  for  example,  love  to  nail  con¬ 
tractors  who  miss  deadlines  or  incur  on- 
the-job  injuries  for  using  methods  that  are 


considered  “new  and  unproved.”) 

Finally,  the  construction  industry  tends  to 
be  highly  outsourced.  Clients  hire  contractors 
who  hire  subcontractors  who  hire  other  sub¬ 
contractors,  and  this  may  inhibit  the  kind  of 
information-sharing  that  IT  would  facilitate. 
Scott  Unger,  president  and  CEO  of  Con- 
structware,  has  stated  that  he  feels  there  is  a 
dark,  lingering  suspicion  in  construction  that 
“making  information  readily  available  and 
transparent  could  be  troublesome.  ” 

Whatever  the  reason,  in  the  past  few  years 
this  resistance  has  begun  to  crumble.  IT  is 
starting  to  permeate  the  construction  indus¬ 
try,  helping  it  to  manage  issues  such  as  cen¬ 
tralization,  facilitating  collaboration  among 
subcontractors,  and  streamlining  scheduling 
and  materials  handling.  And  as  construction 
projects  grow  in  complexity — with  larger 


jobs,  more  government  regulation,  and  more 
sophisticated  materials  and  building  tech¬ 
niques — the  role  of  IT  in  managing  that  com¬ 
plexity  inevitably  will  grow  along  with  it. 

The  world,  as  we  know  both  intuitively  and 
experientially,  is  becoming  an  increasingly 
complex  place  in  which  to  live  and  work.  And 
in  many  ways,  the  nature  of  complexity — its 
qualities,  impact  and  the  challenges  it  pre¬ 
sents — is  consistent  across  all  endeavors  and 
industries,  whether  in  construction,  retail, 
manufacturing  or  government.  Fortunately, 
IT  development  efforts  and  innovations  travel 
easily  across  sector  boundaries.  Adding  a  mar¬ 
ket  as  large  as  construction  to  the  IT  universe 
will  advance  the  art  of  complexity  manage¬ 
ment  for  us  all. 

10,000  Gas  Stations, 

One  (Flexible)  Plan 


"The  time  saved  by  having  the  computer  determine  most  of  the  material  require¬ 
ments  gives  the  project  managers  more  time  to  manage  the  process,”  says 
Mark  Napier,  a  VP  and  systems  manager  at  Bovis  Lend  Lease. 


Often  the  event  precipitating  IT  adoption  in 
the  construction  industry  is  the  prospect  of  a 
project  so  big  that  it  seems  impossible  to  do 
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using  the  old  technology.  Five  years  ago,  two 
gasoline  retailing  giants,  BP  and  Amoco, 
merged  (the  new  company  is  also  called  BP). 
One  consequence  of  this  merger  was  that 
about  1 0,000  gas  stations  scattered  across  the 
Eastern  United  States  needed  to  be  renovated 
(or  “reimaged”)  in  order  to  establish  a  nation¬ 
ally  consistent  look  and  feel  for  the  new  brand. 

These  were  not  slap-dash  makeovers:  An 
average  station  might  need  $100,000  of 
parts  in  a  unique  kit  or  set,  with  each  kit 
drawing  from  the  catalogs  of  nearly  a  dozen 
vendors.  Each  renovation  required  coordi- 


for  coordinating  and  scheduling  the  move¬ 
ment  of  goods  and  equipment  up  and  down 
the  supply  chain.)  NAL  said  it  had  initially 
developed  a  technique  (known  then  as  “in¬ 
transit  merge”  but  since  renamed  “synchro¬ 
nized  order  merge” )  for  a  client  in  the  telecom 
sector  that  involved  dynamically  combining 
materials  from  several  vendors  to  distribute 
as  one  package  to  an  end  site.  Did  that  sound 
like  it  might  be  helpful?  It  did.  Soon  two  proj¬ 
ects  were  under  way:  the  gas  station  reimaging 
program  itself,  and  a  collaboration  among 
Bovis,  NAL  and  Constructware  to  revolu- 


truck  the  kits  to  the  site  on  the  day  the  con¬ 
tractor  was  scheduled  to  arrive.  At  the  same 
time,  other  logic  in  the  system  calculates  proj¬ 
ect  budgets,  defines  and  monitors  schedules, 
and  checks  for  errors. 

Once  the  collaborators  had  the  details 
worked  out,  the  next  step  was  to  educate  the 
suppliers.  Napier  called  a  meeting  and  asked 
two  questions.  The  first  was:  “How  many  of 
you  are  prepared  to  process  2,500  orders  per 
year,  with  changes,  manually?”  Appalled 
silence  followed.  After  giving  everyone  a 
moment  to  contemplate  that  tide  of  paper- 


r  ;  ; 

Until  recently,  construction  IT  usually  reported  to  the 
CFO  because  the  only  information  technology  in  the 
business  was  that  supporting  accounting. 

-MARK  NAPIER,  VP,  BOVIS  LEND  LEASE 


nating  the  operating  needs  and  schedules  of 
a  surveyor,  building  crew,  resource  vendor, 
inventory  manager,  delivery  service  and  sta¬ 
tion  manager  (who  naturally  wanted  the  dis¬ 
ruption  to  his  business  to  be  as  brief  as 
possible).  The  deadline  for  completing  the 
project  was  set  for  2004.  The  only  way  to 
meet  that  was  to  work  on  at  least  50  stations 
simultaneously. 

Bovis  Lend  Lease  was  assigned  construc¬ 
tion  manager  for  the  project.  It  started  work 
using  the  traditional  manual  technique  in 
which  designers,  vendors,  contractors  and 
delivery  personnel  sent  each  other  streams  of 
faxes  about  how  they  never  got  the  last  fax, 
or  had  misread  the  date  of  delivery  as  the  13th 
rather  than  the  3rd,  or  thought  it  said  “now” 
not  “not”  in  the  123rd  paragraph  of  the  proj¬ 
ect  plan.  Of  course,  simultaneously  manag¬ 
ing  50  of  these  projects  this  way  was  stressful 
and  potentially  disastrous. 

One  day  in  the  spring  of  2001,  Bovis  man¬ 
agers  were  discussing  the  situation  with  their 
logistics  provider,  North  American  Logistics, 
or  NAL  (now  known  as  Sirva  Logistics).  (A 
commercial  logistics  company  is  responsible 


tionize  management  of  large,  multisite  con¬ 
struction  projects. 

The  specific  idea  was  that  surveyors  would 
visit  each  gas  station,  document  the  site  pho¬ 
tographically,  fill  out  forms  that  capture  the 
current  details  of  the  station — what  kinds  of 
pumps,  what  sort  of  signage — and  then 
upload  the  data  and  photos  to  a  common  Web 
portal.  This  Web-based  project  management 
system  then  applies  rules  to  these  inputs  that 
infer  an  average  of  70  percent  of  the  parts 
needed  for  each  job  and  generates  a  checklist 
for  the  project  manager  to  use  in  selecting  the 
remaining  parts.  “The  time  saved  by  having 
the  computer  determine  most  of  the  material 
requirements  gives  the  project  managers  more 
time  to  manage  the  process  and  ensures  a  100 
percent  complete  and  accurate  bill  of  materi¬ 
als,”  says  Bovis’s  Napier.  These  parts  lists 
would  then  be  combined  across  projects  and 
the  suppliers  notified  of  the  total  number 
required  of  a  given  part  and  when  that  ship¬ 
ment  would  be  picked  up.  NAL  would  carry 
the  parts  to  a  central  warehouse,  separate 
them,  rebundle  them  into  the  site-specific 
combinations  requested  by  the  surveyors  and 


work,  Napier  asked,  “How  many  of  you  are 
open  to  doing  it  a  better  way? 

“Everybody,”  he  recalls,  “raised  their 
hand.” 

The  Fruits  of  Their  Labors 

According  to  Napier,  the  new  system  deliv¬ 
ered  a  level  of  productivity  that  was  close  to 
astonishing.  Seventy  percent  of  the  workflow 
transactions  were  automated,  saving  tens  of 
thousands  of  manager  hours.  Program  man¬ 
agement  staff  was  reduced  to  50  people  from 
80.  “Currently,  we  are  generating  accurate 
electronic  orders  and  delivering  parts  for  as 
many  as  200  sites  a  week,”  Napier  says.  “This 
would  have  been  almost  impossible  using 
traditional  processes.” 

As  is  often  the  case  with  IT,  the  low-hanging 
fruit  came  in  bunches.  The  system  allows  close 
design  calls  (cases  where  the  station  layout  is 
too  complicated  to  be  captured  by  the  pro¬ 
gram  logic)  to  be  concentrated  in  the  hands  of 
a  single  person:  the  design  manager.  In  the  old 
days,  such  decisions  might  have  been  made  on 
any  level — the  contractor,  the  project  man¬ 
ager  for  that  individual  job  site — and  given 
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the  subjectivity  inherent  in  such  calls,  many  of 
those  decisions  were  wrong  and,  conse¬ 
quently,  would  have  to  be  fixed  down  the 
road.  That  never  happens  now. 

“This  is  a  huge  benefit  for  us,”  says  Napier. 
“We  have  a  more  consistent  bill  of  materials, 
pay  for  fewer  changes  and  get  a  faster  cycle.” 

Bo  vis  also  used  the  system  to  reorganize  the 
top  end  of  its  supply  chain  from  four  ware¬ 
houses  to  one.  As  part  of  this  process,  it 
migrated  to  a  different  set  of  suppliers — com¬ 
panies  more  comfortable  with  IT  and  better 
adapted  to  handling  large  order  volumes. 
(These  were  picked  in  part  through  an  online 
reverse  auction  handled  by  FreeMarkets.  com.) 
Napier  thinks  this  reorganization  saved  in  the 
neighborhood  of  30  percent  on  materials  costs 
alone.  All  in  all,  he  found  the  ROI  on  the  syn¬ 
chronized  order  merge  technology  to  be  an 
amazing  521  percent  annually  (after  amortiz¬ 
ing  the  cost  of  the  software  during  the  four-year 
life  of  the  program).  And  of  course,  the  same 
tools  have  become  a  strategic  asset  for  pursuing 
other  large  multisite  construction  contracts, 
just  as  globalization-driven  consolidation  has 
made  this  type  of  job  increasingly  important. 

A  Collaborative  Slog 
Through  a  Swamp  of 
Complexity 

The  Bovis  answer  to  the  problem  posed  by 
multisite  management  hinged  on  inventing  a 
new  solution  for  facilitating  centralization. 
But  the  opposite  is  also  true.  Large  projects 
must  often  be  decentralized,  and  this  can  be  a 
source  of  complexity  as  well.  One  of  the  most 
complicated  construction  projects  now  under 
way  is  the  Comprehensive  Everglades  Rest¬ 
oration  Plan  (CERP),  an  $8  billion,  30-year 
program  designed  to  restore  the  habitat  and 
ecosystem  of  the  alligators  and  manatees  in 
the  Elorida  swamps.  It  is  certainly  one  of  the 
largest — and  most  complex — initiatives  of  its 
kind  in  the  world. 

For  most  of  the  history  of  Florida,  water 
management  has  had  two  ends:  flood  control 
and  assuring  adequate  supplies  of  clean  water 
to  local  communities  and  farmers.  CERP  is 
charged  with  adding  ecological  restoration 
and  sustainability  without  compromising  the 


/ 


The  more  complex  the  project,  the  greater  the  need  for  a  common  IT  environment  for 
everyone  involved,  says  Alex  Perez,  director  of  the  Program  Controls  Division  of  the 
South  Florida  Water  Management  District. 


V 


gains  made  by  earlier  projects.  It  intends  to  do 
that  by  capturing  2  billion-plus  gallons  of  the 
fresh  water  that  now  flows  out  of  the  swamp 
and  into  the  ocean  from  rivers,  streams  and 
other  outlets  every  day.  The  water  will  be 
reused  to  restore  levels  required  to  support 
native  ecosystems,  from  Lake  Okeechobee 
through  the  “River  of  Grass”  (the  Everglades), 
to  Florida  Bay.  To  do  this,  CERP  will  need  to 
build  more  than  200,000  acres  of  reservoirs 
and  wetland-based  treatment  areas,  remove 


240  miles  of  levees  and  canals,  and  build  about 
300  underground  aquifer  storage  and  recovery' 
wells.  And  those  are  just  the  highlights. 

This  to-do  list  is  divided  into  55  construc¬ 
tion  projects,  many  of  which,  as  in  the  BP  case, 
have  to  be  executed  at  the  same  time.  (Simul¬ 
taneous  management  of  water  projects  is 
mind-bendingly  tricky  when  those  projects 
are  in  the  same  watershed,  as  the  projects  must 
then  interact  with  each  other,  not  to  mention 
that  water  is  notoriously  hard  to  contain  and 
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A  Bridge  Not  Too  Far 

How  IT  helped  build  a  3.5-mile  causeway  over  the  Colorado  River 

One  construction  project  using  new  IT  tools  is  the  Hoover  Dam  Bypass 

Project,  a  3.5-mile,  $231  million  roadway  that  crosses  the  Colorado 
River  approximately  1,500  feet  downstream  of  the  Hoover  Dam.  First, 
laser  scanning  was  used  to  build  a  very  accurate  contour  map  of  the 
rugged,  complex  terrain.  The  map  was  used  to  search  for  geological 
flaws  or  faults  that  might  affect  construction,  then  as  the  underpin¬ 
ning  for  a  3-D  landscape  model  on  which  construction  alternatives  could  be  sited  and  visu¬ 
ally  evaluated. 

When  the  time  came  to  build  the  bridge,  engineers  used  a  structural  model  of  a  fully  traf¬ 
ficked  causeway  to  calculate  the  optimum  length  of  each  stay  and  the  exact  degree  of  ten¬ 
sion  at  which  each  needed  to  be  set.  This  is  often  a  tricky  step  as  the  load  on  a  bridge  during 
construction  looks  nothing  like  the  load  during  actual  use. 

“In  the  old  days,  the  guys  in  the  field  would  cut  stays  according  to  a  written  procedure  that 
was  months  old,  and  which  could  not  readily  account  for  actual  field  conditions  that  vary 
throughout  erection,”  says  David  Goodyear,  senior  vice  president  at  bridge  designer  T.Y.  Lin 
International  of  San  Francisco.  “Now  the  team  assembling  the  bridge  gets  explicit  instruc¬ 
tions  spelling  out  exactly  how  much  tension  to  impose  on  each  element." 

The  design  team,  designated  the  Hoover  Support  Team,  is  a  consortium  headed  up  by 
HDR  Engineering.  Major  partners  are  the  Sverdrup  Civil,  an  arm  of  Jacobs  Engineering,  and 
T.Y.  Lin.  An  animated  rendering  of  the  construction  can  be  seen  at  enr.construction.com/ 
features/technologyeconst/arch  ives/030811,  asp.  -F.H. 


order  about.)  An  added  complexity  is  that 
overall  management  of  CERP  is  shared 
between  the  Army  Corps  of  Engineers  and  the 
South  Florida  Water  Management  District 
(SFWMD).  In  fact,  each  of  the  55  projects  has 
two  project  managers,  one  from  the  Corps, 
one  from  SFWMD. 

But  where  the  complexity  of  CERP  really 
hits  the  stratosphere  is  in  the  huge  number  of 
stakeholders.  About  7  million  citizens  in  Cen¬ 
tral  and  Southern  Florida  live  in  the  2.5  million 
acres  that  compose  the  affected  watersheds. 
CERP  cuts  across  the  legal  responsibilities  and 
interest  areas  of  a  long  list  of  government 
organizations — including  federal  and  state 
parks,  local,  state  and  federal  environmental 
regulators,  Indian  nations,  16  county  govern¬ 
ments,  more  than  100  municipalities,  and  an 
even  longer  list  of  private  interest  groups, 
including  those  that  represent  the  environ¬ 
mentalists,  farmers,  consumers  and  tourists — 
all  bent  on  ensuring  that  water  supplies  remain 
ample  for  their  constituents’  needs  and  inter¬ 
ests.  The  political  reality  is  that  a  project  of  this 
scale  needs  to  maintain  positive  relations  with 
just  about  everybody  in  Florida. 

CERP  addressed  that  problem  by  setting 
up  two  huge  websites.  The  internal  one  uses 
Primavera  Enterprise  to  support  short-term 
collaborations  (editing,  revisions,  comments) 
among  the  members  of  each  subproject’s 
delivery  team.  Everything  else  goes  on  the 
public  site,  www.evergladesplan.org.  For 
instance,  a  project  such  as  CERP  naturally 
entails  a  great  many  meetings,  especially  since 
state  and  federal  transparency  laws  mandate 
general  access.  The  site  is  used  to  organize  and 
publish  all  these  schedules  and  locations, 
including  agendas,  downloadable  versions  of 
the  texts,  maps,  photos  and  modeling  studies 
that  will  form  the  basis  of  the  discussion,  and 
minutes.  The  names,  postal  and  e-mail 
addresses,  and  phone  numbers  of  each  sub¬ 
project’s  managers  are  there.  So  is  a  zoomable 
mapping  tool  ( gis.evergladesplan.org/cerp ) 
and  a  sophisticated  viewer  that  allows  users 
to  compare  the  models  used  to  design  different 
aspects  of  the  system  (modeling. cerpzone 
.org/cerp_recover/pnwiewer/pmviewer.jsp). 

“We  put  every  ounce  of  detail  out  there,” 


says  Randy  Smith,  spokesman  for  SFWMD, 
and  in  a  project  like  this,  that’s  a  lot  of  ounces. 
Indeed,  an  outsider  is  likely  to  be  overwhelmed 
by  all  the  data-sharing  going  on,  a  problem 
that  Smith  says  CERP  is  aware  of  and  working 
on.  The  system  has  5  terabytes  of  storage  in 
readiness,  of  which  250GB  are  in  use  today. 

Alex  Perez,  director  of  the  Program  Con¬ 
trols  Division  for  SFWMD,  thinks  the  lesson 
of  the  CERP  sites  is  that  large,  multisite  pro¬ 
grams  that  require  broad  political  support 
probably  have  to  think  about  a  “parallelized” 
form  of  management,  in  which  component 
projects  manage  relations  with  their  specific 
constituencies  and  each  other  in  a  common  IT 
environment.  Exhibit  A  for  his  argument  is 
the  popularity  CERP  has  enjoyed  (a  recent 
funding  vote  passed  unanimously)  despite 
meddling  with  perhaps  the  most  critical  and 
politically  volatile  resource  in  the  state — 
water.  Perez  credits  the  huge  transparency 


effort  supported  on  Everglades.org  with  this 
acceptance. 

The  Stuff  Pipe  Dreams 
Are  Made  On 

Farnham  &  Pfile  (F&P)  specializes  in  build¬ 
ing  coal  “prep  plants,”  facilities  that  purify  or 
concentrate  the  energy  in  coal  by  extracting 
noncoal  material  (water,  rock)  from  the  ore. 
Though  its  role  is  not  widely  known,  coal  pro¬ 
cessing  is  in  fact  a  key  component  of  the  energy 
sector  (and,  as  environmental  issues  grow 
more  urgent,  it’s  becoming  even  more  impor¬ 
tant).  Most  of  our  coal-burning  plants  depend 
on  cleansed  coal  to  keep  them  within  per¬ 
formance  standards.  If  the  hundreds  of  prep 
plants  scattered  around  the  country  had  to 
close,  so  too  would  the  energy  plants. 

Prep  plants  work  by  crushing  coal  ore  into 
small  pieces  and  then  using  a  variety  of 
processes  (screens,  filters,  flotation  tanks)  to 
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sort  the  resulting  fragments  into  what  is 
mostly  coal  and  what  is  mostly  not.  (The  sort¬ 
ing  process  never  achieves  1 00  percent  purity. ) 
Typically,  plants  process  between  500  and 
1,000  tons  an  hour,  and  many  do  better  than 
that.  Moving  this  huge  volume  of  material 
around  a  plant  takes  a  significant  quantity  of 
high-end  pipe,  easily  tens  of  thousands  of  feet. 
The  pipe  weaves  back  and  forth,  over  and 
under  the  plant  equipment  and  structural  ele¬ 
ments  of  the  building  in  an  immensely  com- 


to  rip  out  a  whole  line,”  he  says,  “and  a  line 
might  have  10  elbows  in  it  at  $6,000  each.” 
Even  pipes  cut  onsite  (water-carrying  pipes,  for 
instance)  often  need  to  be  redone  several  times 
to  accommodate  design  changes  and  unex¬ 
pected  twists  and  turns.  As  a  result,  contractors 
such  as  F&P  typically  allow  30  percent  or  more 
of  their  initial  bids  for  correcting  piping  errors. 

In  200 1 ,  IBM/Dassault  Systemes  introduced 
a  major  upgrade  of  a  3-D  CAD  tool  called 
CATIA  (Computer-Aided  Three-dimensional 


by  one  operator  are  unreadable  by  his  succes¬ 
sor,  and  so  on.  With  CATIA  it’s  possible  to  link 
all  information,  from  operating  instructions 
to  maintenance  histories,  and  keep  that  infor¬ 
mation  updated,  backed-up  and  ubiquitously 
accessible.  If  instructions  need  to  be  animated, 
CATIA  can  generate  those  as  well. 

Second,  the  tool  allows  F&P  to  expand  out 
of  its  niche,  both  horizontally,  into  new  mar¬ 
kets  (power  plants,  synfuel  and  waste  fuel 
plants),  and  vertically,  into  maintenance  serv- 
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One  of  the  frustrations  of  running  any  kind  of  industrial 
facility  is  that  operating  manuals  deteriorate  over  time. 

Pages  fall  out.  Corrections  scrawled  by  one  operator  are 
unreadable  by  another.  Now,  it’s  possible  to  keep  that  in¬ 
formation  updated,  backed-up  and  ubiquitously  accessible. 
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plicated  knot.  Much  of  the  work  of  building  a 
prep  plant  lies  in  designing  the  geometry  of 
this  knot.  No  two  designs  are  alike,  and  they 
vary  with  site,  client  needs  and  ore  quality. 

And  to  add  another  layer  of  complexity  and 
difficulty,  because  coal  is  so  acidic,  much  of  the 
pipe  has  to  have  a  thick  ceramic  lining.  Ceramic 
has  to  be  baked,  so  those  lined  pipes  are 
designed  and  made  offsite,  as  opposed  to  being 
cut  and  welded  in  place  as  needed,  as  is  done 
with  simple  steel  pipe.  Flistorically,  according  to 
Tom  Porterfield,  F&P’s  vice  president  for  oper¬ 
ations,  the  enormous  complexity  of  a  prep 
plant  has  prevented  contractors  from  prede¬ 
termining  the  correct  measurements  for  those 
pipes,  meaning  they  are  forced  to  throw  away 
a  lot  of  pipe.  And  ceramic  pipe  is  not  cheap.  “If 
one  elbow  is  wrong,  you  might  end  up  having 
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Interactive  Applications).  The  upgrade  not  only 
managed  spatial  relations  but  knew  enough 
physics  to  test  components  for  physical  con¬ 
flicts,  performance  logic,  loading  stress,  con¬ 
nection  compatibilities  and  general  standards 
adherence.  Suddenly  it  was  possible  to  generate 
pipe  designs  that  were  right  every  time.  The 
30  percent  that  had  had  to  be  allocated  for 
errors  fell  right  to  the  bottom  line.  This  saving 
was  especially  important  to  F&P,  since  prep 
plants  are  the  backbone  of  its  business. 

As  was  the  case  with  Bo  vis,  F&P  found  that 
digitizing  its  work  brought  several  added  ben¬ 
efits.  In  particular,  the  logical  structure  gener¬ 
ated  during  design,  in  which  all  the  parts  and 
their  physical  relations  are  modeled,  turns  out 
to  constitute  a  useful  backbone  for  organiz¬ 
ing  the  huge  library  of  operations  and  main¬ 
tenance  documentation  that  makes  up  plant 
operating  manuals.  That’s  a  big  plus  for  F&P’s 
clients,  since  running  a  plant  requires  contin¬ 
uous  consultation  with  the  operating  manual, 
and  one  of  the  frustrations  of  running  any 
kind  of  industrial  facility  is  that  operating 
manuals  deteriorate  over  time.  Volumes  dis¬ 
appear.  Pages  fall  out.  Corrections  scrawled 


ices.  Once  operating  histories  and  lifecycle 
standards  are  entered  into  the  program, 
CATIA  can  manage  inventory  and  schedule 
replacements  of  parts.  So  now,  instead  of  just 
building  a  project  and  handing  the  customer 
the  keys,  P&F  offers  a  maintenance  service, 
turning  customer  relationships  that  were 
episodic  into  continuous  revenue  streams. 

Help  in  a  Complex  World 

At  present,  most  of  the  IT  solutions  being 
adopted  in  the  construction  industry  were 
developed  in  other  sectors.  But  construction  is 
a  huge  industry.  It  embraces  virtually  every  cat¬ 
egory  of  complexity  management,  from  simu¬ 
lation  to  resource  location  to  collaboration  to 
centralization.  The  stakes  are  high,  and  the 
industry  requires  very  high  degrees  of  accuracy 
in  real-time.  As  a  result,  construction  is  closer  to 
joining  the  IT  development  community  as  a  full 
partner.  And  when  it  does,  a  flood  of  solutions 
will  start  to  flow  back  the  other  way.  ran 


Fred  Hapgood  is  a  freelance  writer  who  reports 
frequently  for  CIO  on  emerging  technologies.  You 
can  respond  to  this  article  at  letters@cio.com. 
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"I  want  to  do  whatever  is  possible  to 
make  our  professional  insurance  staff 
more  productive,  efficient,  and  accurate 
in  their  work."  —  Betty  Johnson 


Great  Moments  at  Work. 


Betty  Johnson 
Vice  President  of  IT 

The  NIA  Group  of  Cos.,  Santa  Cruz,  CA 

Betty  Johnson  is  vice  president  of 
Information  Technology  at  The  Nonprofits 
Insurance  Alliance  (NIA)  Group  of 
Companies,  which  provides  liability 
insurance  for  501(c)(3)  charitable 
nonprofit  organizations  in  17  states  and 
Washington,  D.C.  To  her  staff,  she's 
an  IT  hero. 

Her  challenge:  to  design  a  system  that 
fully  integrated  the  Group's  claims  and 
underwriting  processes.  "We  needed  to 
streamline  our  organizational  processes 
and  make  it  easier  for  our  staff  to  do  their 
jobs,"  she  says. 

Her  response  was  NIAC2000,  a  modular, 
fully  integrated  underwriting  and  claims 
processing  system.  This  system's 
capabilities  capture  both  structured  and 
unstructured  data,  and  its  intuitive 
graphical  user  interface  makes  NIAC2000 
a  pleasure  to  use.  Incorporating  all  lines 
of  the  Group's  existing  business,  NIAC2000 
also  makes  it  simple  to  add  other 
modules,  such  as  finance  and  marketing. 

Since  deploying  NIAC2000  in  early 
2001,  NIA  Group  has  greatly  increased  its 
productivity.  The  result?  A  300  percent  rise 
in  insurance  premium  revenues,  but  only 
an  85  percent  increase  in  staff. 

Great  Moment  at  Work: 

"Seeing  the  satisfaction  of  staff.  That's  who 
we,  IT,  work  for." 

Microsoft  Office  System  salutes  those 
who  have  done  great  work  in  the  IT  field. 


Success  Stories  of  an  IT  Hero 


©  2004  Microsoft  Corporation.  All  rights  reserved.  Microsoft  and  the  Office  logo  are  either  registered  trademarks  or 
trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other  countries.  The  names  of  actual  companies  and 
products  mentioned  herein  may  be  the  trademark  of  their  respective  owners. 
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A  Cold  Look  at  Hot  Trends 


Inferiority 

Complex 

Even  though  the  importance  of  IT  is  continually 
reaffirmed,  CIOs  insist  on  questioning  their  role 


BY  MEGAN  SANTOSUS 


IN  NICHOLAS  CARR’S  CONTROVERSIAL  2003  Harvard  Business 
Review  article,  he  argued  that  IT  had  become  irrelevant,  a  com¬ 
modity — no  more  strategic,  he  wrote,  than  electricity.  You 
needed  it,  but  you  didn’t  have  to  think  about  it  a  whole  lot. 
While  the  piece  certainly  generated  a  lot  of  buzz,  and  gave 
many  a  beleaguered  CIO  an  unwelcome  frisson  of  insecurity, 
few  people  bought  the  argument  in  its  entirety.  (Carr  expands 
his  thesis  in  the  book  Does  IT  Matter f,  coming  out  May  18.) 
As  one  might  expect,  CIOs,  consultants  and  IT  vendors  were 
harshest  in  their  criticism. 

Of  course,  IT  does  matter,  and  not  because  the  usual  suspects 
say  so  but  because  economic  conditions  say  so.  IT  may  be  the 
single  most  important  driving  force  in  our  economy.  So,  by 
extension,  you’d  think  that  CIOs  would  be  among  the  most 
powerful,  influential  executives  around.  Somehow,  however, 
that  hasn’t  happened.  Or  at  least  that’s  the  perception  among 
CIOs  and  the  reporters  and  analysts  who  talk  about  them. 

According  to  Louis  E.  Lataif,  dean  of  Boston  University’s 
Graduate  School  of  Management,  IT  is  a  major  reason  why  the 
latest  recession  was  less  severe  than  previous  downturns.  From 


1998  to  2000,  spending  on  Y2K,  the  euro  conversion  and  the 
dotcoms  propelled  the  economy  into  the  stratosphere.  When  (as 
it  was  bound  to  do  sooner  or  later)  the  economy  tanked  in 
early  2001,  the  fall  was  hard  yet  surprisingly  short.  Techni¬ 
cally,  Lataif  says,  the  subsequent  recession  lasted  only  eight 
months,  from  March  to  November  2001. 

“Economic  recessions  are  inevitable,”  says  Lataif.  “A  stop 
in  spending  is  followed  by  an  inventory  recession — a  shut¬ 
down  of  manufacturing  to  work  down  inventory.”  Given  the 
heights  of  the  IT-fueled  boom  that  preceded  the  recession,  it 
was  natural  to  expect  any  inventory  work-off  to  last  much 
longer  than  it  did.  Yet  throughout  the  boom,  inventory  levels 
were  30  percent  lower  than  they’d  averaged  for  the  previous 
40  years.  And  we  can  thank  IT  for  that.  In  effect,  Lataif  says, 
IT  took  the  sting  out  of  the  recession — at  least  in  terms  of  its 
duration — by  enabling  inventory-reducing  practices  during  the 


9  6  CIO  MARCH  15,  2004 


www.cio.com 


ILLUSTRATION  BY  ROBERT  MEGANCK 


CIO  ENTERPRISE  VALUE  AWARDS 


Honoring  Business  Achievement  Through 
the  Innovative  Use  of  Information  Technology 

DEADLINE:  MAY  1,2004 


The  Resource  for  Information  Executives 


2005 

CIO  ENTERPRISE  VALUE  AWARDS 


Congratulations  to  Our  2004  Winners! 

Academic  Management  Services  Corp. 

Ace  Hardware  Corp. 
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boom,  such  as  just-in-time  manufacturing  and  automated 
replenishment. 

Yeah,  But  What  About  Jobs? 

Of  course,  the  impact  of  IT  on  business  cycles  hasn’t  always 
been  positive.  Just  ask  the  millions  of  displaced  workers  whose 
employment  prospects  remain  dim  even  as  most  economic  indi¬ 
cators  begin  to  glow  brightly  in  this,  the  so-called  jobless  recov¬ 
ery.  In  many  industries,  lost  jobs  are  the  result  of  businesses 
becoming  more  efficient  as  workers  become  more  productive — 


Unlike  CIOs,  CFOs  haven’t  felt  the  need  to  justify 
their  existence  in  the  wake  of  all  those  financial 
misdeeds  and  accounting  lapses  that  we  read 
about  in  the  morning  papers  almost  every  day. 


two  consequences  directly  correlated  to  the  effective  use  of  IT. 
So  while  IT  helps  drive  down  costs  for  businesses  and  con¬ 
sumers,  the  gains  in  both  efficiency  and  productivity  take  a 
personal  toll  on  the  unemployed.  It’s  an  ironic  twist  that  mil¬ 
lions  of  IT  workers  themselves  have  been  displaced  by  (cer¬ 
tainly)  cheaper  and  (maybe)  more  productive  programmers 
and  managers  in  places  like  India  and  the  Philippines. 

Lataif  acknowledges  that  overcoming  unemployment  is  an 
ongoing  challenge.  By  design,  IT  is  supposed  to  eliminate  jobs. 
Yet  Tataif  suggests  that  IT  can  help  here  too. 

In  the  modern  capitalist  era,  companies  have  always  aimed 
to  hit  four  targets:  Lower  costs,  be  faster  than  the  competition, 
provide  quality,  and  deliver  products  and  services  people  want. 
In  each  of  these  areas,  IT  can  make  a  huge  difference,  particu¬ 
larly  in  terms  of  products  and  services.  And  it’s  Lataif’s  belief 
that  innovation  (along  with  a  rigorous  education  system  that 
emphasizes  math  and  science)  ultimately  will  create  new  jobs. 

Well,  What  About  Me? 

“Anyone  can  make  the  argument  that  technology  is  like  elec¬ 
trical  power,  in  that  every  company  has  access  to  it,”  Lataif 
says.  “But  access  to  technology  is  not  the  point.  The  point  is 
using  technology  to  transform  how  businesses  function.” 

And  right  now  there’s  still  plenty  of  room  for  IT-fueled  inno¬ 
vation.  Online  technologies — which  to  date  center  around  retail 
and  supply  chain  management — are  still  in  their  infancy.  As 
they  mature,  they  will  change  how  many  companies  do  busi¬ 
ness.  Take,  for  example,  mass  customization — now  an  oxy¬ 
moron.  While  the  Internet  allows  consumers  access  to  a 
modicum  of  customized  products — everything  from  cars,  to 


clothing,  to  computers — companies  have  yet  to  figure  out  how 
to  design,  manufacture  and  deliver  individually  customized 
items  faster  and  cheaper  than  mass-produced  ones.  That’s  the 
kind  of  innovation  that  needs  a  technology  champion. 

Forget  about  being  persona  non  grata  in  the  executive  suite. 
As  a  driver  of  innovation,  it’s  obvious  that  IT  is  essential  (and 
strategic)  when  it  comes  to  maintaining  a  competitive  edge.  It 
stands  to  reason  that  those  managers  who  understand  how 
to  use  information  technology  to  create  new  products  and 
deliver  new  services  will  be  a  most  valuable  asset  in  any  board- 
room.  As  Lataif  sees  it,  line  executives  are 
already  beginning  to  catch  on  to  this. 
“The  traditional  knowledge  once  held 
exclusively  by  CIOs  is  being  absorbed  by 
executives  in  operations  as  a  matter  of 
necessity,”  he  says. 

But  as  technology  expertise  is  dispersed 
throughout  the  management  ranks,  will 
the  CIO  become  irrelevant?  Not  at  all.  Do 
the  traditional  profit-and-loss  responsibil¬ 
ities  of  business  unit  leaders  render  the  CFO  redundant?  Not 
so  anyone  has  noticed.  As  IT  knowledge  is  dispersed,  the  CIO 
of  today  is  in  a  unique  position  to  coordinate,  to  set  agendas 
and  define  goals — in  short,  to  lead.  “The  next  generation  of 
CEOs  will  come  from  the  ranks  of  CIOs  as  much  as  CFOs,” 
Lataif  says. 

Whether  this  happens  depends  to  a  large  extent  on  CIOs 
today.  Will  they  seize  the  day?  That’s  hardly  a  sure  thing.  If 
nothing  else,  the  debate  that  followed  Carr’s  article  revealed 
an  almost  neurotic  degree  of  insecurity  and  defensiveness 
among  CIOs.  True,  the  article  questioned  the  importance  of 
their  core  competency,  but  isn’t  it  interesting  to  note  that  unlike 
CIOs,  CFOs  (to  drag  them  in  front  of  the  class  again)  haven’t 
felt  the  need  to  justify  their  existence  in  the  wake  of  all  those 
financial  shenanigans  and  accounting  lapses  that  we  read  about 
in  the  morning  papers  almost  every  day. 

IT  is  a  relatively  new  discipline,  so  perhaps  it’s  natural  for 
those  who  ply  the  trade  to  be  a  bit  unsure  about  where  they 
stand  in  the  grand  corporate  pecking  order.  But  the  time  has 
come  for  CIOs  to  stop  obsessing  about  how  their  peers  view 
them  and  start  working  toward  the  future  that  Lataif  predicts 
for  them.  Holding  the  position  of  CFO  is  an  accepted  stepping- 
stone  to  higher  office  in  part  because  CFOs  assume  it  to  be. 
They  take  it  for  granted. ..and,  therefore,  so  does  everyone  else. 
Before  IT  can  be  seen  in  the  same  light,  CIOs 
have  to  get  over  their  timidity  and  assert  their 
right  to  the  corner  office.  HE! 

Opinion  and  Knowledge  Management  Editor  Megan 
Santosus  can  be  reached  at  santosus@cio.com. 
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"I  need  a  field-proven  IP  telephony  solution 
that  can  grow  with  my  business." 


Give  3Com®  a  seat  at  the  table. 


IP  telephony  is  a  long-term  investment.  So  you  need  a  system  that  can  meet  your  long-term  needs. 


3Com  IP  Telephony  Systems  scale  from  5  to  50,000  users  to  support  your  business  growth — 
whether  you  grow  into  a  larger  single  site  or  multi-site  campus.  With  3Com,  teleworkers  and 
remote  offices  can  have  the  same  productivity  enhancements  as  your  international 
headquarters — and  you  can  have  the  same  central  management  and  affordability. 

So  if  you're  looking  at  IP  telephony,  look  at  the  provider  that  can  grow  the  way  you  do.  Give 
3Com  a  seat  at  the  table,  and  get  the  true  scalability  you  need. 


Find  out  more — including  how  to  enter  for  a  chance  to  win  a  42"  Plasma  Flat  Panel  Television  valued  at 
$5,000.*  Visit  www.3com.com/IPtelephony8. 
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*  Sweepstakes  is  open  to  legal  residents  of  the  United  States  (excluding  Puerto  Rico)  and  Canada  (excluding  Quebec).  No  purchase  necessary.  Purchase  will 
not  increase  chances  of  winning.  Prize  valued  at  $5,000  (USD).  Odds  of  winning  depend  on  number  of  entries  received.  Subject  to  Official  Rules.  For  rules 
and  entry  details,  go  to  www.3com.com/IPtelephony8.  Ends  5/31/04.  Void  where  prohibited.  This  promotion  may  be  altered  or  canceled  at  any  time. 
Copyright  ©  2004  3Com  Corporation.  All  rights  reserved.  3Com  and  the  3Com  logo  are  registered  trademarks  of  3Com  Corporation  and  Possible  made 
practical  is  a  trademark  of  3Com  Corporation.  All  other  company  and  brand  names  may  be  trademarks  of  their  respective  owners. 
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Possible  made  practical" 


On  Monday,  January  12,  security  thought  leaders  convened  in  Washington  D.C.  to  discuss 


BALANCING  HOMELAND  SECURITY  WITH  CORPORATE  PROSPERITY 


Richard  Falkenrath,  Homeland  Security,  The  White  House 


Admiral  Thomas  Collins,  Commandant,  U.S.  Coast  Guard 


i 


Moderator  Arthur  R.  Miller  engages  high-level  business  and  government  leaders  in  a  lively  debate. 


Arthur  R.  Miller,  Harvard  law  professor/TV  commentator 
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From  Inception  to  Implementation-ITThat  Matters 


As  the  world 
awakens  to  voice 
over  IP,  some  CIOs 
already  are  reaping 
the  benefits 


IT  Phone  Home 

BY  MATT  VILLANO 

TELECOMMUNICATIONS  |  Voice  over  Internet  protocol  (VoIP)  has  been  poised  for  its 
breakout  since  1998.  Now,  after  years  of  fits  and  starts,  numerous  enterprises  have 
announced  VoIP  rollouts  aimed  at  linking  voice  and  data  as  well  as  increasing  efficiency  and 
lowering  costs. 

Companies  are  choosing  VoIP  for  many  reasons,  and  three  examples  provide  a  good  sense  of 
the  choices  available  on  today’s  market.  One  implementation  is  practical:  At  dental  consultancy 
Consani  Seims,  VoIP  provides  a  virtual  presence  in  four  Northwestern  states  and  Alaska.  Another 
implementation  is  sensible:  Hat  manufacturer  New  Era  Cap  uses  VoIP  to  connect  five  disparate 
facilities  while  simultaneously  slashing  long-distance  costs.  The  third  could  be  classified  as  crit¬ 
ical:  In  Nevada  County,  Calif.,  VoIP  technology  was  the  only  rational  solution  when  the  county 
government’s  private  branch  exchange  (PBX)  was  near  death. 

No  matter  why  organizations  decide  on  VoIP — nor  which  vendors  they  choose  to  implement 
it — the  days  of  switched-circuit  telecommunications  are  coming  to  an  end,  say  experts.  “This  is 
the  future,”  says  Walt  Magnussen,  director  for  telecommunications  at  Texas  A&M  University  (see 
“Beyond  VoIP,”  Page  102). 

If  that’s  true,  the  only  remaining  question  is,  Are  you  ready? 
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A  New  Era  at  New  Era 

New  Era  Cap  began  operations  in  1920  with 
a  handful  of  people  working  out  of  a  factory  in 
Derby,  N.Y.  The  outfit  grew  modestly  during 
the  next  80  years,  patenting  its  famous 
“59Fifty”  fitted  caps — which  became  the  stan¬ 
dard  for  all  1 86  major  and  minor  league  pro¬ 
fessional  baseball  teams — and  opening  one 
additional  factory  in  Buffalo,  N.  Y.,  to  meet  its 
niche  audience.  But  when  the  company  began 
an  aggressive  marketing  campaign  in  the 
1 990s,  everything  changed.  Surging  demand 
forced  the  company  to  quickly  open  three  facil¬ 
ities  in  Alabama,  pushing  Vice  President  of 
Information  Systems  and  CIO  Dan  Marmion 
into  a  “telecommunications  nightmare.” 

“We  were  spending  thousands  in  long  dis¬ 
tance  alone.  Our  phone  guys  were  charging 
us  $  1 3  0  a  pop  j  ust  to  come  in  and  add  another 
line,”  Marmion  says.  “It  was  insane.” 


Marmion  decided  to  unify  communications 
under  a  new  PBX.  Rather  than  purchase 
traditional  analog  equipment,  however, 
Marmion  opted  for  a  digital  PBX  and  VoIP 
equipment.  In  the  end,  Marmion  settled  on 
tiny  AltiGen  Communications  to  craft  an  all- 
inclusive  approach. 

The  heart  of  the  AltiGen  solution  was  what 
the  company  calls  its  AltiServ2  IP  telephone  sys¬ 
tem,  a  series  of  IP-based  PBX  boxes  at  each 
location  that  communicate  with  each  other 
over  a  VPN  for  secure  transmission  of  data  and 
voice.  Equally  critical  were  new  AltiTouch  Plus 
telephones,  analog  phones  designed  to  offer 
simple  extension-to-extension  calling  over  IP, 
as  well  as  advanced  voice-mail  features  includ¬ 
ing  the  capability  to  check  messages  as  e-mail 
attachments.  New  Era  also  signed  on  for  Alti- 
Gen’s  AltiConsole  product,  a  unit  that  lets  com¬ 


pany  receptionists  forward  calls  from  a  toll-free 
number  to  any  extension  on  the  network  with¬ 
out  incurring  the  fees  the  company  once  paid 
to  its  old  provider.  Together,  Marmion  says,  the 
tools  create  an  effective  and  inexpensive  solu¬ 
tion  to  the  challenge  of  linking  remote  offices. 

The  transition  was  not  without  its  pratfalls. 
Marmion  says  it  took  New  Era  nearly  two 
months  to  establish  good  voice  quality,  and 
three  months  beyond  that  to  convince  internal 
users  to  adopt  the  new  technology.  Today,  no 
matter  how  New  Era  officials  perceive  their 
VoIP  system,  no  one  can  deny  that  the  tech¬ 
nology  is  yielding  huge  dividends.  Marmion 
says  communication  quality  between  facilities 
is  better  than  ever,  and  brags  that  he  calls  the 
facilities  in  Alabama  from  his  office  in  Derby  at 
least  10  times  a  day,  all  for  free.  What’s  more, 
whereas  New  Era  used  to  pay  per  change  for 
even  slight  modifications  to  the  old  PBX, 


-New  Era  Cap  CIO  Dan  Marmion 

administrators  now  can  use  AltiGen  software 
to  make  fixes  such  as  adding  new  extensions 
and  rerouting  calls.  The  new  system  already  is 
also  showing  major  ROI.  Though  Marmion 
declines  to  say  exactly  how  much  he  spent  on 
VoIP,  he  reveals  that  he  expects  to  save  nearly 
$15,000  per  year  in  long  distance  alone,  and 
nearly  $50,000  per  year  overall.  You  have  to 
tip  your  cap  to  those  kinds  of  numbers. 

The  Dentist  Is  In 

Availability  is  everything  in  the  medical  prac¬ 
tice  business,  and  at  1 1 -employee  dental  con¬ 
sultancy  Consani  Seims,  representatives  live 
and  die  by  their  telephones.  Consani  consult¬ 
ants  spend  their  days  dialing  dentists  to  chat 
with  them  about  buying  or  selling  a  practice. 
When  these  dentists  return  their  calls,  it’s  crit¬ 
ical  that  someone  at  Consani  Seims  answers. 


Beyond  VoIP 

In  the  business  world,  there  is  the  VoIP  of 
today.  At  the  Internet2  Technology  Evalua¬ 
tion  Center  at  Texas  A&M  University,  there  is 
the  VoIP  of  tomorrow.  Through  this  facility, 
Cochair  of  ITEC’s  Internet2  Voice  Over  IP 
Working  Group  Walt  Magnussen  spends  his 
time  and  government  money  developing 
future  voice-over-IP technologies.  "The 
working  group  is  focusing  on  VoIP  reliability 
issues,  interoperability  testing  and  potential 
disaster  recovery  capabilities  of  VoIP."  he 
says,  addingthat  "many  of  the  capabilities 
that  we  are  now  testing  will  soon  be  stan¬ 
dard  product  offerings.” 

In  the  meantime,  Magnussen  and  his  col¬ 
leagues  are  studying  new  aspects  of  VoIP. 
One  project  revolves  around  a  recent  open- 
source  protocol  dubbed  Session  Initiated 
Protocol  (SIP),  a  signaling  protocol  devel¬ 
oped  by  the  Internet  Engineering  Task  Force. 
As  Magnussen  explains  it,  this  new  protocol 
is  a  hybrid  of  traditional  HTTP  and  simple 
mail  transfer  protocol  (SMTP)  that  transfers 
data  even  faster  than  the  current  H.323  pro¬ 
tocol  standards  in  place  today.  Primarily 
used  for  VoIP.  SIP  also  works  for  video  or 
any  other  digital  media  type.  According  to 
Magnussen,  enterprise  customers  will  most 
likely  use  this  technology  to  deliver  services 
such  as  videoconferencing  and  remote 
blackboarding  over  VoIP  down  the  road. 

“In  the  last  few  years,  there  was  debate 
over  whether  H.323  or  SIP  would  win  out," 
says  Magnussen,  who  is  also  director  for 
telecommunications  at  Texas  A&M.  “Here, 
we  are  already  preparing  for  the  next 
phase— SIP  will  win." 

The  group  is  also  looking  at  VoIP's  role  in 
disaster  recovery.  “Much  of  the  Working 
Group's  disaster  recovery  efforts  began 
after  technologists  at  Columbia  University 
were  able  to  make  calls  out  of  New  York  City 
on  Sept.  11  using  the  Internet2  network  and 
VoIP,"  he  says.  "This  began  some  work  that 
looked  at  the  possibility  of  routing  calls 
around  congested  telephone  networks  in 
disaster  situations  over  reliable  packet- 
based  networks. "  -M.  V. 


We  were  spending  thousands  in 
long  distance  alone.  Our  phone 
guys  were  charging  us  $130  a  pop 
ust  to  come  in  ana  add  another  line, 
twas  insane.” 
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President  and  chief  technology  decision-maker 
Paul  Consani  describes  the  challenge  as  “min¬ 
imizing  phone  tag,”  and  admits  that  he’s  tried 
everything,  including  24-hour  answering  serv¬ 
ices,  to  make  it  work. 

“Most  of  our  business  goes  down  on  the 
phone,”  he  says,  noting  that  the  company 
abandoned  24-hour  answering  due  to  mixed 
results.  “If  we  lose  the  ability  to  field  incoming 
calls,  we  lose  everything.” 

For  years,  Consani  Seims  paid  long-distance 
tolls  to  route  callers  from  a  PBX  box  at  com¬ 
pany  headquarters  in  Vancouver,  Wash.,  to 
field  offices  in  Alaska,  Idaho,  Montana,  Ore¬ 
gon  and  elsewhere  in  Washington  state.  Last 
year,  when  dropped  calls  rendered  this  method 
ineffective,  Consani  himself  started  looking  for 
alternatives  he  could  implement  on  the  fly.  He 
had  read  about  VoIP  in  the  local  newspaper 
and  figured  it  would  be  too  expensive  to  imple¬ 
ment  at  a  business  as  small  as  his.  Still,  he 
decided  to  give  it  a  whirl  and  contacted  nearly 


a  dozen  providers  to  see  what  they’d  say.  The 
response  to  these  initial  RFPs  was  over¬ 
whelming — all  of  the  vendors  came  back  with 
bids.  In  the  end,  he  chose  a  product  from  Zul- 
tys  Technologies. 

On  the  back  end,  the  Zultys  solution 
revolved  around  an  MX250  Enterprise  Media 
Exchange — an  IP  server  that  combines  the  fea¬ 
tures  of  a  PBX,  voice-mail  server,  voice  gate¬ 
way  and  Internet  gateway.  On  the  front  end, 
Zultys  deployed  Zip  4x4  phones,  which  essen¬ 
tially  integrate  the  traditional  business  phone 
with  a  1 00-megabit  Ethernet  switch.  With  the 
system,  Consani’s  consultants  can  plug  their 
IP  telephones  into  any  Ethernet  Internet  con¬ 
nection  and  talk  away.  They  also  can  quickly 
program  the  devices  to  forward  calls  to  cell 
phones.  When  dentists  ring,  the  calls  come 


through  the  MX250,  which  automatically 
routes  them  over  the  data  network  to  the 
appropriate  extensions.  What’s  more,  because 
the  phones  can  behave  as  routers,  traveling 
consultants  can  plug  computers  into  them  as 
well,  piping  data  and  voice  over  the  same 
connection  from  remote  locations. 

“VoIP  has  become  our  entire  network,” 
quips  Consani,  who  notes  that  the  most  chal¬ 
lenging  aspect  of  the  transition  was  teach¬ 
ing  employees  to  adopt  an  entirely  different 
method  of  communication.  “Now  that  we 
[can  always]  answer  our  phones,  our  clients 
get  the  impression  that  we’re  working  harder, 
that  we’re  in  the  office  a  lot  more,  and  that 
there  are  more  of  us.  ” 

An  increasingly  professional  image  isn’t 
the  only  ROI  that  Consani  Seims  has  experi¬ 
enced  from  its  foray  into  VoIP.  First,  because 
the  Zultys  VoIP  system  is  easy  to  manage 
from  any  phone  on  the  network,  Consani  and 
his  wife,  Debi,  the  company’s  office  manager, 


say  they  recover  up  to  1 0  hours  a  week  that 
they  formerly  spent  handling  technical  issues 
with  their  old  PBX.  More  important  are  the 
cost  savings.  Consani  says  that  he  was  will¬ 
ing  to  spend  up  to  $200,000  on  a  new  tele¬ 
com  system,  and  notes  that  he’s  spent  no 
more  than  $60,000  on  hardware  and  soft¬ 
ware  to  date.  Factor  in  additional  thousands 
of  dollars  in  long-distance  savings  between 
offices,  and  Consani  estimates  that  VoIP  has 
scored  him  a  quarter-million-dollar  ROI. 
Those  kinds  of  figures  should  make  anyone 
smile. 

The  Wild,  Wild  West 

Pay  a  visit  to  Nevada  City,  Calif.,  and  you’ll 
feel  as  if  you’ve  stepped  back  to  the  summer 
of  1849,  when  men  with  gold  pans  and 
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golden  dreams  descended  on  the  town  to 
prospect  for  treasure.  The  Nevada  Theater, 
built  in  1865,  still  shows  movies  on  Sunday 
nights.  The  National  Exchange  Hotel,  circa 
1880,  still  rents  clean  beds  for  the  night. 
Indeed,  downtown  Nevada  City  today  looks 
very  much  as  it  must  have  looked  back  then, 
complete  with  hitching  posts,  old-fashioned 
storefronts  and  other  relics  of  the  days  gone 
by.  And  until  recently,  Nevada  County’s  tele¬ 
com  infrastructure  was  a  relic  too — before 
Desktop  Services  Manager  Bill  Miller  stepped 
in  and  addressed  a  crisis  situation  with  VoIP. 

In  the  late  1990s,  to  describe  the  telecom¬ 
munications  situation  in  Nevada  County  as 
dire  would  have  been  an  understatement.  The 
largely  rural  county,  which  encompasses  978 
square  miles  of  the  Sierra  foothills  east  of  San 
Francisco,  was  running  all  of  its  communica¬ 
tions  over  a  Siemens  Satum2E  PBX  purchased 
during  the  Reagan  years.  The  PBX  was  so  old 
that  Siemens  had  stopped  supporting  it.  Miller 
would  spend  nights  fixing  it  with  wire,  electri¬ 
cal  tape  and  spare  parts  he  bought  on  eBay  with 
his  own  money.  Finally,  when  the  device  failed 
to  reboot  for  a  full  24  hours  one  weekend  in 
1999,  Miller  knew  it  was  time  for  a  change. 

Miller  had  been  following  VoIP  for  years, 
and  decided  immediately  to  migrate  county 
telecommunications  systems  over  to  the  new 
technology.  After  a  brief  but  legally  mandated 
RFP  procedure,  he  selected  3Com  to  provide 


Nevada  County  Desktop  Services 
Manager  Bill  Miller  says  he  spent 
nights  fixing  the  PBX  with  wire, 
electrical  tape  and  spare  parts  he 
bought  on  eBay  with  his  own  money. 
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Model  Hacker  Behavior 


the  hardware,  and  purchased  a  series  of 
NBX  100  products  for  gradual  deployment 
over  three  years.  The  first  NBX  100  system 
was  installed  in  the  county  courthouse,  an 
implementation  that  cost  $  1 4,000  and  con¬ 
sisted  of  80  phones.  By  the  beginning  of 
2002,  10  different  county  facilities  were 
transmitting  voice  traffic  alongside  data — 
1 ,200  VoIP  phones  in  all.  High-end  features 
on  the  new  system  included  standard  VoIP 
options  such  as  call  forwarding  and  remote 
management,  as  well  as  the  capability  to  lis¬ 
ten  to  e-mail  messages  through  an  applica¬ 
tion  that  reads  them  over  the  phone.  Later 
that  year,  after  consistently  spotty  service 
from  the  out-of-the-box  NBX  system, 
Miller  signed  up  for  network  monitoring 
and  management  capabilities  from  VoIP 
software  company  Qovia  to  sharpen  gen¬ 
eral  clarity  and  ensure  quality  of  service 
(QoS)  across  the  board. 

The  QoS  deal  with  Qovia  paid  huge  div¬ 
idends;  Miller  says  that  since  early  2002, 
the  county’s  system  has  operated  almost 
flawlessly.  Overall,  he  notes  that  ROI  on 
the  move  to  VoIP  has  been  even  more 
impressive,  netting  the  county  an  estimated 
$1.5  million  in  savings  in  long-distance 
and  hardware  costs.  Miller  adds  that  by 
eliminating  his  need  for  telephone  techni¬ 
cians,  the  new  system  has  freed  thousands 
of  dollars  in  his  budget  to  reallocate  to 
other  jobs  or  additional  IT  expenditures. 
Case  in  point:  After  months  of  research, 
Miller  plans  to  install  his  own  switches  at 
routers  in  Sacramento,  San  Francisco  and 
Los  Angeles  later  this  year  so  that  all  of 
Nevada  County’s  calls  to  those  cities  will 
become  free  calls  too. 

“Wherever  Nevada  County  influence  is, 
that’s  where  our  VoIP  telephone  system  will 
be,”  Miller  declares,  predicting  that  expen¬ 
ditures  on  expanding  the  system  should  pay 
for  themselves  by  December  2004.  “After 
years  of  living  in  the  dark  ages,  now  that  we 
have  technology  to  use  to  our  advantage,  I 
want  to  make  sure  we  do  just  that.” 


Matt  Villano  is  a  California-based  freelance 
writer.  Send  feedback  to  Technology  Editor 
Christopher  Lindquist  at  clindquist@cio.com. 


SECURITY  |  Forget  about  patches. 
Researchers  at  the  Florida  Institute  of 
Technology  are  looking  for  ways  to  fight 
hackers  by  modeling  their  methods,  or 
"exploits.”  The  research  could  eventually 
lead  to  new  types  of  security  tools  capable 
of  stopping  attacks  that  hackers  haven’t 
even  invented  yet. 

The  effort  is  being  led  by  James  Whit¬ 
taker,  an  associate  professor  and  director  of 
the  school’s  Center  for  Software  Engineer¬ 
ing  Research.  Whittaker,  a  security  author 
and  member  of  Microsoft’s  Trustworthy 
Computing  Academic  Advisory  Board,  says 
hackers  have  always  had  the  upper  hand— 
and  always  will— because  they  can  dedicate 
all  of  their  time  to  the  task  of  breaking 
through  security  systems.  “Microsoft,  Sun, 
Cisco— they  all  have  products  to  ship.  They 
have  a  day  job,”  Whittaker  says.  “Security  is 
only  one  of  the  things  that  they're  thinking 
of.  These  hackers,  the  only  thing  they  do  is 
sit  around  trying  to  break  stuff.” 

To  counteract  the  hackers’  apparent 
advantage,  Whittaker  and  his  team  are 
attempting  to  create  detailed  models  of 


both  the  intent  and  the  semantics  of  every 
possible  hacker  attack.  The  group  has  also 
created  a  computer  language  to  describe 
these  models.  Ideally,  Whittaker  proposes, 
this  information  could  be  made  public,  giv¬ 
ing  software  developers  in  both  government 
and  private  industry  a  test  bed  for  creating 
highly  secure  software.  Security  product 
makers— firewall  manufacturers  and  the 
like— meanwhile,  could  build  the  models 
into  their  products  as  a  means  of  identifying 
and  defending  against  as-yet  unknown 
assaults. 

The  group  is  currently  modeling  stan¬ 
dard  types  of  attacks,  but  Whittaker  says  the 
team  will  branch  out  and  begin  to  include 
behavioral  scientists  who  could  help  model 
the  psychology  of  hackers  to  further  refine 
the  models.  The  U.S.  government  seems  to 
believe  the  work  will  pay  off.  Florida  Tech 
recently  received  a  $70,000  grant  from  the 
Air  Force  Research  Laboratory  to  continue 
the  research,  and  Whittaker  says  the  group 
has  already  received  more  than  a  million 
dollars  in  aid  for  the  project. 

-Christopher  Lindquist 
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Logic  and  Licensing 

BY  ERIC  KNORR 

Commercial  apps  and  the  hyperintegrated 
enterprise  may  ead  us  into  a  licensing  tangle 


BUSINESS  I  Coding  is  the  easy  part  of  cre¬ 
ating  almost  any  enterprise  app.  The  hard 
part  is  modeling  the  business  process:  Pur¬ 
chase  order  A  goes  from  point  B  to  point  C  to 
be  signed  by  party  D  so  that  the  approved 
amount  can  be  deducted  from  account  E.  But 
what  if  the  PO  never  makes  it  to  point  C?  What 
if  account  E  is  closed  ? 

The  complexity  of  “simple”  business 
processes  yields  requirements  documents  as 
thick  as  phone  books  (or,  conversely,  explains 
why  some  people  get  sick  of  pestering  IT  and 
write  their  own  rogue  applications).  The  intri¬ 
cacies  of  business  logic  also  explain  why  enter¬ 
prise  application  companies  such  as  SAP  and 
PeopleSoft  continue  to  prosper. 

The  application  giants  are  basically  vast 
repositories  of  business  logic ,  extending  deep 
into  veitical  industries.  The  whole  ERP  propo¬ 
sition  promotes  that  customers  buy  logic 
instead  of  build  it.  And  the  high-profile  ERP 
failures  have  stemmed  mainly  from  mono¬ 
lithic,  inflexible  collections  of  business  logic 
that  couldn’t  possibly  fit  all  circumstances. 

The  app  vendors  are  doing  better  at  easing 
customization  and  crafting  meticulous, 
industry-specific  versions.  But  the  ultimate 
compromise  between  building  from  scratch 
and  buying  monolithic  ERP  has  been  obvious 
for  a  while:  Break  the  monoliths  into  many 
manageable  components  that  can  be  modi¬ 
fied,  mixed  and  matched.  Yet  the  big  enter¬ 
prise  app  vendors  have  been  less  than 
enthusiastic.  SAP  has  gone  furthest,  letting 


developers  modify  and  recombine  R/3  com¬ 
ponents — but  only  when  the  reconstituted 
apps  run  on  SAP’s  own  Net  Weaver  platform. 

If  the  app  vendors  insist  on  that  kind  of  con¬ 
trol,  why  not  abstract  the  functionality  of  their 
business  logic  using  Web  services?  After  all, 
the  desire  to  recycle  existing,  well-crafted  busi¬ 
ness  logic  is  arguably  the  main  driver  behind 
today’s  biggest  metatrend:  service-oriented 
architecture  (SOA).  Most  big  commercial 
enterprise  apps  now  offer  Web  services  inter¬ 
faces,  usually  through  a  bundled  app  server. 

The  problem  is  that  remotely  accessing  the 
business  logic  of  (instead  of  simply  extracting 
data  from)  a  business  application  means  you 
add  to  your  licensing  fee.  For  example,  SAP 
sells  “portlets,”  mini  apps  that  run  on  several 
major  portal  servers,  that  export  various 
pieces  of  R/3  functionality.  In  fact,  the  big  app 
vendors  see  spreading  their  application  func¬ 
tionality  around  the  organization  as  a  highly 
promising  revenue  opportunity. 

Portlets  have  a  standard  licensing  structure, 
but  the  licensing  details  on  exporting  business 
logic  via  more  organic  integration  methods 
remain  sketchy.  When  I  asked  an  SAP  market¬ 
ing  director  to  comment,  he  wouldn’t  specu¬ 
late  on  where  the  lines  will  be  drawn.  But  Gene 
Phifer,  vice  president  and  distinguished  analyst 
for  Gartner,  has  a  good  feel  for  what’s  happen¬ 
ing.  “The  vendors  are  leaning  toward  a  model 
where  they  charge  for  that  kind  of  access  as  a 
user  license,”  he  says.  “And  if  you  license  it  by 
the  number  of  users  versus  the  number  of 


Suffice  it  to  say 
that  there’s 
no  free  ogic: 
litheryou 
pay  to  bui  I  a  or 
pay  to  buy 


-Eric  Knorr 


CPUs,  then  they  can  stick  you  with  a  signifi¬ 
cant  bill.  Users,  on  the  other  hand,  are  fighting 
that  [plan]  tooth  and  nail.” 

Suffice  it  to  say  that  there’s  no  free  logic: 
Either  you  pay  to  build  or  pay  to  buy.  But  over 
the  long  haul,  it  makes  you  wonder  about  the 
future  of  the  enterprise  application  vendors.  If 
we’re  moving  toward  SOA,  how  can  any  large 
organization  possibly  stay  on  top  of  all  the 
licensing  issues?  And  if  the  app  vendors  don’t 
charge  for  spreading  their  business  logic 
around,  how  can  they  survive? 

For  enterprises  leaning  toward  building 
rather  than  buying,  several  tools  can  help  ease 
the  pain  of  business  logic  development.  Fair 
Isaac’s  Blaze  Advisor  and  Ilog’s  JRules  let 
developers  capture  business  processes  and 
implement  them  in  rules  engines.  Blaze  tilts 
toward  decision  management,  while  JRules 
focuses  on  business  rules  management.  Both 
support  XML-based  integration,  and  both 
are  intended  to  augment  existing  back-office 
apps  rather  than  replace  them. 

The  objective  should  be  to  build  business 
logic  that’s  truly  yours — reflecting  the  details 
of  your  business  processes,  and  gradually  sup¬ 
planting  common-denominator  enterprise 
apps  for  which  you  already  pay  too  much. 


Eric  Knorr  is  executive  editor  at  large  for  InfoWorl d. 
He  can  be  reached  at  eknorr@pacbell.net 
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COVER  STORY 
Bad  News  for  Analysts 

By  Scott  Berinato  I  50 

Analysts  are  in  the  throes  of  some 

serious  self-analysis  due  to  statistics 
like  this:  From  2002  to  2003,  the 
average  per  company  spending  on  IT 
research  and  reports  (that  is,  analyst  serv¬ 
ices)  declined  41  percent.  And  it  is  projected 
to  decline  another  1 1  percent  this  year.  CIOs 
admit  that  analysts  provide  a  service  they 
need,  but  they  are  no  longer  willing  to  pay 
what  the  IT  analyst  companies  want  to 
charge  them,  and  more  important,  they 
don’t  want  to  pay  the  way  the  analysts  want 
them  to — by  subscription.  It’s  not  that  tradi¬ 
tional  research  and  analysis  is  suddenly 
worthless.  It’s  just  worth  less,  and  this  puts 
CIOs  in  a  position  of  great  power.  Some 
CIOs  have  started  to  replace  analysts  with 
research  by  their  own  in-house  experts  and 
with  peer-networking  groups  either  online 
or  through  e-mail.  Others  who  signed  multi¬ 
year  contracts  two  and  three  years  ago  now 
want  out.  The  Big  Five  companies — AMR 
Research,  Forrester  Research,  Gartner,  IDC 
and  Meta  Group — will  likely  survive,  and 
maybe  even  rebound,  but  they  are  becoming 
different  kinds  of  companies,  offering  differ¬ 
ent  products  to  different  customers. 


“The  influence  the  analyst 
firms  have  is  waning.  Their 
information  is  somewhat 
more  questioned.  I’m  not 
sure  they’ll  ever  hold 
that  pedestal  position 
anymore.” 

-ANNE  ROGERS, 
DIRECTOR  OF  INFORMATION 
SAFEGUARDS  AT  WASTE  MANAGEMENT 


Sweat  the  Small  Stuff  By  Kim  Girard  I  60 

LAST  YEAR,  spam  cost  corporations  $10  billion,  and  the  7,064  new  viruses,  worms  and  Trojan 
horses  cost  companies  more  than  $13  billion  in  losses.  These  are  hardly  the  big  terrorist  attacks  or 
regional  blackouts  that  CIOs  have  focused  on.  These  are  mere  nuisances.  But  for  many  companies, 
it’s  like  being  roasted  by  1,000  scorches.  The  answer  is  nuisance  management,  a  holistic  focus  on 
the  root  of  the  problem,  using  the  tools  and  weapons  to  not  just  fight  fires  but  to  prevent  them. 
Such  strategies  include  setting  up  automated  tools  to  monitor  what  software  gets  loaded  onto  PCs, 
enforcing  a  better  written  policy  for  e-mail  or  banning  certain  kinds  of  instant  messaging  applica¬ 
tions  from  company  desktops.  But,  ultimately,  IT  departments  need  to  stop  viewing  workers  as  the 
enemy  or  source  of  all  nuisances  and  start  recruiting  them  to  be  part  of  the  solution. 


Ruthless  Strategies  By  Lauren  Gibbons  Paul  I  70 

COMPANY  LEADERS,  including  the  CIO,  must  find  out  exactly  where  they’re  making  their 
money,  says  Amir  Hartman,  consultant  and  cofounder  of  Mainstay  Partners,  professor  at  Berkeley’s 
Haas  School  of  Business  and  author  of  the  new  book  Ruthless  Execution:  What  Business  Leaders 
Do  When  Their  Companies  Hit  the  Wall.  Doing  so  forces  a  clear  understanding  of  which 
customers  and  businesses  are  profitable,  which  leads  to  a  strategy  that  the  IT  organization  can  map 
to  and  a  shift  out  of  reactive  mode  toward  fact-based  portfolio  management.  When  the  bottom 
dropped  out  of  Cisco’s  growth  market,  for  example,  CEO  John  Chambers  was  able  to  shift  strategy 
to  focus  on  things  that  mature  companies  do — cost  and  productivity  management.  Given  that  shift, 
the  IT  portfolio  changed.  CIOs  can  drive  and  execute  such  change  by  being  benevolent  dictators, 
setting  parameters  around  operational  governance,  defining  the  decision-making  roles  and  responsi¬ 
bilities,  and  determining  what  gets  measured. 


Case  Files:  First  Things  First  ByLafeLow  I  78 

PUBLISHER  DESERET  BOOK  had  a  random  IT  project-prioritization  process  before  new  CIO 
Niel  Nickolaisen  brought  in  a  model  that  classifies  projects  based  on  whether  they  are  mission- 
critical,  differentiate  the  company  within  its  industry — or  both.  Once  a  project  is  classified,  IT  and 
business  leaders  build  an  appropriately  weighted  business  case  for  it.  Nickolaisen  contends  that 
most  processes  that  come  up  as  IT-enabled  are  mission-critical  but  not  differentiating.  Seen  through 
this  lens,  processes  and  related  systems  need  not  be  unique  or  exceptional  but  simply  well-executed — 
a  realization  that  often  reduces  project  complexity,  and  saves  time  and  expense  in  favor  of  efforts 
classified  as  differentiating.  Such  filters  are  useful,  says  case  commentator  Gopal  K.  Kapur,  but  he 
advises  Deseret  that  risk  exposure  should  be  part  of  the  filter.  Proposals  should  be  tied  to  specific 
metrics,  such  as  obtaining  25  percent  additional  market  share  by  December  2004  at  an  investment 
of  no  more  than  $2  million. 


Essential  Technology:  IT  Phone  Home  ByMattvniano  I  101 

SLOWLY,  STEADILY,  voice  over  IP  (VoIP)  has  begun  to  eat  away  at  the  market  share  of  tradi¬ 
tional  PBX-based  phone  systems.  From  government  entities  (such  as  Nevada  County,  Calif.,  which 
replaced  a  dilapidated  PBX  system  held  together  with  parts  bought  on  eBay)  to  manufacturers  (includ¬ 
ing  New  Era  Cap,  which  needed  to  find  a  way  to  affordably  connect  remote  manufacturing  facilities), 
telecom  managers  are  discovering  that  VoIP  can  offer  flexibility,  lower  costs  and  more  features  than 
traditional  phone  systems.  While  some  issues  surrounding  voice  quality  and  end  user  training  remain, 
many  companies  have  found  that  once  you  try  VoIP,  you  never  want  to  go  back. 
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Introducing  Firebox9  X.  It’s  all  the  integrated,  expandable  network 
security  your  company  really  needs.  All  inside  one  intelligent  box. 
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SECURITY  GUIDE  Help  the  CEO  XYA'  or  by  calling  1-877-732-8780. 


The  right  management  should  do  more  than  just  protect. 
It  should  also  enable. 


eTrust™  Security  Management  Software 


With  eTrust  security  management  software,  your  information  isn't  just  safeguarded  from  internal  and  external  threats. 
We  provide  authorized  customers,  partners,  and  employees  with  appropriate  access  that  can  help  your  business  grow. 
In  addition  to  securing  data,  eTrust  also  provides  a  single  view  of  your  security  environment,  so  you  can  make  real-time 
decisions  based  on  comprehensive  information.  If  you're  looking  for  ways  to  minimize  risk  while  maximizing  your 
potential,  or  to  get  a  white  paper,  go  to  ca.com/security. 
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